Lucene search
Gentoo FoundationMGASA-2014-0531HistoryDec 19, 2014 - 6:06 p.m.
Updated claws-mail packages fix security vulnerability
2014-12-1918:06:35
Gentoo Foundation
advisories.mageia.org
19
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.022
Percentile
89.6%
Off-by-one error in the DecompressRTF function in ytnef.c in Yerase’s TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow (CVE-2010-5109). The claws-mail package contains an embedded copf of libytnef, which has been patched to fix this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | claws-mail | < 3.11.1-1.1 | claws-mail-3.11.1-1.1.mga4 |
Related
ubuntucve
ubuntucve
CVE-2010-5109
2014-05-05 00:00:00
prion
prion
Buffer overflow
2014-05-05 17:06:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0531)
2022-01-28 00:00:00
nvd
nvd
CVE-2010-5109
2014-05-05 17:06:02
nessus
nessus
Fedora 16 : libytnef-1.5-8.fc16 (2012-10286)
2012-07-16 00:00:00
Mandriva Linux Security Advisory : libytnef (MDVSA-2013:099)
2013-04-20 00:00:00
Fedora 17 : libytnef-1.5-8.fc17 (2012-10250)
2012-07-16 00:00:00
cvelist
cvelist
CVE-2010-5109
2014-05-05 17:00:00
cve
cve
CVE-2010-5109
2014-05-05 17:06:02
debiancve
debiancve
CVE-2010-5109
2014-05-05 17:06:02
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.022
Percentile
89.6%
Related for MGASA-2014-0531