CVE-2005-3887

MEDIUM · CVSS 5.4 EPSS 1.89%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-11-29 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2005-3887

Severity

MEDIUM

CVSS

5.4

EPSS

1.89%

Original NVD Description

Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to (1) cause a denial of service (hang) via an image filename of AUX: sent twice (hang), or (2) write to the LPT1 port via a filename of "LPT1:".