LWN.net Logo

thunderbird: heap overflow

Package(s):thunderbird seamonkey CVE #(s):CVE-2008-0304
Created:February 29, 2008 Updated:March 7, 2008
Description: Security research firm iDefense reported that researcher regenrecht discovered a heap-based buffer overflow vulnerability in Mozilla mail code which could potentially allow an attacker to run arbitrary code. The vulnerability is caused by allocating a buffer that can be three bytes too small in certain cases when viewing an email message with an external MIME body.
Alerts:
Fedora FEDORA-2008-2118 2008-02-28
Fedora FEDORA-2008-2060 2008-02-28
Slackware SSA:2008-061-01 2008-03-03
Ubuntu USN-582-1 2008-02-29
Ubuntu USN-582-2 2008-03-06
Mandriva MDVSA-2008:062 2007-03-06

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds
Powered by Rackspace Managed Hosting.