111 matches found
Ubuntu 10.04 LTS / 10.10 : thunderbird, thunderbird-locales vulnerabilities (USN-1020-1)
Jesse Ruderman, Andreas Gal, Nils, Brian Hackett, and Igor Bukanov discovered several memory issues in the browser engine. An attacker could exploit these to crash THunderbird or possibly run arbitrary code as the user invoking the program. CVE-2010-3776, CVE-2010-3777, CVE-2010-3778 Marc...
Mozilla Foundation Security Advisory 2010-74
Mozilla Foundation Security Advisory 2010-74 Title: Miscellaneous memory safety hazards rv:1.9.2.13/ 1.9.1.16 Impact: Critical Announced: December 9, 2010 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.13 Firefox 3.5.16 Thunderbird 3.1.7...
Mozilla Thunderbird 3.1.x < 3.1.7 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 3.1.x 3.1.7. Such versions are potentially affected by multiple vulnerabilities : - Multiple memory corruption issues could lead to arbitrary code execution.MFSA 2010-74 - On the Windows platform, when 'document.write' is called with a very lon...
CVE-2008-3778
CVE-2008-3778 affects Avaya SIP Enablement Services (SES) Server 5.0 and Communication Manager 5.0 on the S8300C with SES enabled. The remote management interface can proceed with Core router updates even after an invalid login, enabling remote attackers to cause a messaging outage (DoS) or to ga...
CVE-2007-3778
The CVE describes a remote command execution vulnerability in the G/PGP (GPG) Plugin for SquirrelMail (versions 2.0 and 2.1dev before 20060912) where shell metacharacters placed in the messageSignedText were processed by gpg_check_sign_pgp_mime in gpg_hook_functions.php. The issue arises from uns...
CVE-2006-3778
IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the 1 "Save As Draft" option is used or 2 a "," comma is inside the "phrase" portion of an address, which can cause the e-mail to be sent to users that were deleted from the To, CC...
CVE-2006-3778
CVE-2006-3778 affects IBM Lotus Notes 6.0, 6.5, and 7.0. The issue arises in how replies to e‑mail messages with alternate name users are processed when (1) the Save As Draft option is used or (2) a comma is present in the phrase portion of an address. This can cause mail to be sent to users who ...
CVE-2005-3778
The CVE-2005-3778 entry concerns MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686. The vulnerability is described as an unspecified DoS achievable via unknown vectors, affecting the affected component and resulting in partial availability impact. Connected sources confirm the product and version ran...