Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Gadu-Gadu文件对话框下载伪造文件扩展漏洞
Vulnerability Description
Gadu-Gadu是一款聊天客户端。 Gadu-Gadu不正确处理文件扩展名，远程攻击者可以利用这个漏洞伪造扩展名，发送恶意文件给Gadu-Gadu客户端接收。 Bartosz Kwitkowski报告远程验证用户可以建立包含特殊文件名的链接，当Gadu-Gadu接收处理时会以伪造的文件扩展名显示文件并下载，这可通过在文件实际扩展名后追加大量空格字符完成。
CVSS Information
N/A
Vulnerability Type
N/A