LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Recent Features

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

PostgreSQL 9.3 beta: Federated databases and more

LWN.net Weekly Edition for May 9, 2013

Printable page
Weekly edition Kernel Security Distributions Contact Us Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ Sponsors

thunderbird: buffer overflow

Package(s):mozilla-thunderbird, thunderbird CVE #(s):CVE-2008-4070
Created:September 26, 2008 Updated:January 8, 2009
Description: From the Ubuntu advisory: Georgi Guninski discovered that Thunderbird improperly handled canceled newsgroup messages. If a user opened a crafted newsgroup message, an attacker could cause a buffer overrun and potentially execute arbitrary code with the privileges of the user invoking the program.
Alerts:
Fedora FEDORA-2008-9859 2008-11-21
Fedora FEDORA-2008-9807 2008-11-21
Debian DSA-1697-1 2009-01-07
SuSE SUSE-SA:2008:050 2008-10-08
CentOS CESA-2008:0908 2008-10-06
Red Hat RHSA-2008:0908-01 2008-10-01
Debian DSA-1696-1 2009-01-07
Slackware SSA:2008-270-01 2008-09-29
Mandriva MDVSA-2008:206 2008-09-26
Ubuntu USN-647-1 2008-09-26
Gentoo 201301-01 2013-01-07
(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds