The Ekg Project maintains a niche instant-messaging client that exhibits a focused vulnerability profile centered on its core product. The durable signal reflects a link-resolution weakness class, specifically improper link handling prior to file access, which is characteristic of applications that process user-supplied file paths or URI schemes. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Ekg Project over time
Signals from CVEs in this vendor scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2005-1850HIGH Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown impact and attack vectors, a different vulnerability than CVE-2 | Jul 19, 2005 | 10.0 | 25 | NO | NO |
CVE-2005-1851HIGH A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors. | Jul 19, 2005 | 10.0 | 25 | NO | NO |
CVE-2005-1852HIGH Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a | Jul 26, 2005 | 7.5 | 21 | NO | NO |
CVE-2005-2369HIGH Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code. | Jul 26, 2005 | 7.5 | 20 | NO | NO |
CVE-2005-1916MEDIUM linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files. | Jul 6, 2005 | 5.5 | 17 | NO | NO |
CVE-2007-1663MEDIUM Memory leak in the image message functionality in ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service. | Jun 27, 2007 | 5.0 | 15 | NO | NO |
CVE-2007-1664MEDIUM ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service (NULL pointer dereference) via a vector related to the token OCR functiona | Jun 27, 2007 | 5.0 | 15 | NO | NO |
CVE-2007-1665MEDIUM Memory leak in the token OCR functionality in ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service. | Jun 27, 2007 | 5.0 | 15 | NO | NO |
CVE-2005-2448MEDIUM Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invalid behavior in applications) on big-endian systems. | Aug 3, 2005 | 5.0 | 15 | NO | NO |
CVE-2005-2370MEDIUM Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) | Jul 26, 2005 | 5.0 | 15 | NO | NO |
Signals from CVEs in this vendor scope (10 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Ekg Project.
Media articles that mention a CVE ID that affects a product developed by Ekg Project — matched by CVE ID, not by vendor name.