Lucene search

K
freebsdFreeBSDB1E8C810-01D0-11DA-BC08-0001020EED82
HistoryMar 29, 2005 - 12:00 a.m.

sylpheed -- MIME-encoded file name buffer overflow vulnerability

2005-03-2900:00:00
vuxml.freebsd.org
17

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.4%

Sylpheed is vulnerable to a buffer overflow when displaying
emails with attachments that have MIME-encoded file names.
This could be used by a remote attacker to crash sylpheed
potentially allowing execution of arbitrary code with the
permissions of the user running sylpheed.

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.4%

Related for B1E8C810-01D0-11DA-BC08-0001020EED82