Lucene search

K
osvGoogleOSV:DSA-906-1
HistoryNov 22, 2005 - 12:00 a.m.

sylpheed - several

2005-11-2200:00:00
Google
osv.dev
6

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

Colin Leroy discovered several buffer overflows in a number of
importer routines in sylpheed, a light-weight e-mail client with GTK+,
that could lead to the execution of arbitrary code.

The following matrix explains which versions fix this vulnerability

old stable (woody) stable (sarge) unstable (sid)
sylpheed 0.7.4-4woody1 1.0.4-1sarge1 2.0.4-1
sylpheed-gtk1 n/a n/a 1.0.6-1
sylpheed-claws 0.7.4claws-3woody1 1.0.4-1sarge1 1.0.5-2
sylpheed-claws-gtk2 n/a n/a 1.9.100-1

We recommend that you upgrade your sylpheed package.

CPENameOperatorVersion
sylpheedeq1.0.4-1

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P