|
|
| |
|
| |
pine: remote exploits
| Package(s): | pine |
CVE #(s): | CAN-2003-0720
CAN-2003-0721
|
| Created: | September 11, 2003 |
Updated: | September 17, 2003 |
| Description: |
Pine, developed at the University of Washington, is a tool for reading,
sending, and managing electronic messages (including mail and news).
A buffer overflow exists in the way unpatched versions of Pine prior to
4.57 handle the 'message/external-body' type. The Common Vulnerabilities
and Exposures project has assigned the name
CAN-2003-0720 to this issue.
An integer overflow exists in the Pine MIME header parsing in versions
prior to 4.57. The Common Vulnerabilities and Exposures project
has assigned the name
CAN-2003-0721 to this issue.
Both of these flaws could be exploited by a remote attacker sending a
carefully crafted email to the victim that will execute arbitrary code when
the email is opened using Pine. |
| Alerts: |
|
( Log in to post comments)
|
|
|