Mozilla Releases BrowserID Web Authentication System

Mozilla has released a new browser-based federated login mechanism called BrowserID that is designed to replace the login process on Web sites that requires users to supply an email and password. The experimental system relies on the Verified Email protocol and also works on other browsers,...

Mozilla Thunderbird MIME外部主体堆溢出漏洞

CVECAN ID: CVE-2008-0304 Thunderbird是Mozilla发布的邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Thunderbird在处理畸形格式的邮件数据时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Thunderbird没有正确地解析邮件中的external-body MIME类型，在计算所要分配堆缓冲区的字节数时没有为所要拷贝的数据保留足够的空间。如果用户受骗打开了恶意邮件消息的话，就可能最多覆盖3字节的缓冲区，导致执行任意指令。 Mozilla Thunderbird 2.0.0.9 临时解决方法：...

Code injection

Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...

CVE-2006-2267

Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...

CVE-2006-2267

Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...