Secunia

Piotr Bania has reported a vulnerability in Kadu, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the Kadu client within the handling of image send requests. This can be exploited to crash a vulnerable client by sending a large number of image send requests. The user will reportedly be blocked by the server for a period of time after the client is restarted.

Successful exploitation requires that the user has added the attacker to his user list.

The vulnerability has been reported in version 0.4.3. Other versions may also be affected.

Solution
Update to version 0.5.0 or later.

Provided and/or discovered by
Piotr Bania

Changelog
Further details available in Customer Area

Original Advisory
http://www.piotrbania.com/all/adv/kadu-fun.txt

Deep Links
Links available in Customer Area