Mozilla: Crash processing S/MIME messages with multiple signatures

When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash. This vulnerability affects Thunderbird 68.5...

Mozilla: Crash processing S/MIME messages with multiple signatures

When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash. This vulnerability affects Thunderbird 68.5...

MGASA-2020-0091 Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix security vulnerabilities: When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents CVE-2020-6792. When processing an email message with an ill-formed envelope, Thunderbird could read data from a random...

CVE-2020-6795

When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash. This vulnerability affects Thunderbird 68.5...

PT-2020-19227

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 68.5 Description A bug in the MIME processing code causes a null pointer dereference when processing a message with multiple S/MIME signatures, leading to a crash. Recommendations For versions prior to 68.5, updat...

Buffer length checks in MIME processing — Mozilla

As a follow-up to vulnerability reported in MFSA 2008-12 Mozilla has checked similar constructs in the rest of the MIME handling code. Although no further buffer overflows were found we changed several function calls to use safer versions of the string routines that will be more robust in the fac...

GLSA-200606-19 : Sendmail: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200606-19 Sendmail: Denial of Service Frank Sheiness discovered that the mime8to7 function can recurse endlessly during the decoding of multipart MIME messages until the stack of the process is filled and the process crashes. Impa...

[SA17170] Symantec Brightmail AntiSpam MIME Processing Denial of Service

TITLE: Symantec Brightmail AntiSpam MIME Processing Denial of Service SECUNIA ADVISORY ID: SA17170 VERIFY ADVISORY: http://secunia.com/advisories/17170/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Symantec Brightmail AntiSpam 6.x http://secunia.com/product/3656/...

PT-1996-1033 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail versions 8.8.0 through 8.8.1 Description: A buffer overflow issue in the MIME processing of Sendmail allows for root access. Recommendations: For Sendmail versions 8.8.0 and 8.8.1, update to a version that fixes this issue. At the...