Inappropriate interpretation of mailto URL scheme by mail client software

Overview The mailto URL scheme is used to designate the Internet email address on a web page. Specifying an email address and body text using the mailto URL scheme gives a template for a mail message. Many mail clients have a function to set a field specified by the mailto URL scheme in a mail...

Eudora Japanese version stops working after the application crashes

Overview Eudora is a mail client from QUALCOMM. The Eudora Japanese version sold by Livedoor contains a vulnerability to crash, caused by previewing an email that has a corrupt image attachment. Impact Eudora Japanese version stops functioning, once crashed by opening an email message containing ...

Debian DSA-1574-1 : icedove - several vulnerabilities

This shares a lot of text with dsa-1532.wml, dsa-1534.wml, dsa-1535.wml Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. The Common Vulnerabilities and Exposures project identifies the following problems : -...

[SECURITY] Fedora 8 Update: thunderbird-2.0.0.14-1.fc8

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 7 Update: thunderbird-2.0.0.14-1.fc7

Mozilla Thunderbird is a standalone mail and newsgroup client...

Groupwise 7.0 - 'mailto: scheme' Buffer Overflow (PoC)

PRODUCT: GroupWise 7.0 OS: Windows Xp The scheme "mailto" is vulnerable if one takes as default mail client to GroupWise, the fault is to implement the scheme followed by an extensive argument and this causes the buffer overflow. This brings the consequence that can overwrite the EIP and is able ...

[SECURITY] Fedora 7 Update: seamonkey-1.1.9-2.fc7

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

thunderbird security update

CentOS Errata and Security Advisory CESA-2008:0209 Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a...

Moderate: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws...

Fedora 8 : thunderbird-2.0.0.12-1.fc8 (2008-2060)

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the way Thunderbird processed certain malformed HTML mail content. A HTML mail message containing malicious content could cause Thunderbird to crash, or potentially execute arbitrary code as the user runnin...

Debian Security Advisory DSA 1485-1 (icedove)

The remote host is missing an update to icedove announced via advisory DSA 1485-1. OpenVAS Vulnerability Test $Id: deb14851.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1485-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1485-1] New icedove packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1485-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1391-1 (icedove)

The remote host is missing an update to icedove announced via advisory DSA 1391-1. OpenVAS Vulnerability Test $Id: deb13911.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1391-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1325-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird < 1.5.0.14 Multiple Vulnerabilities

The remote version of Mozilla Thunderbird suffers from various security issues, several of which may lead to execution of arbitrary code on the affected host subject to the user's privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29743; scriptversion"1.15";...

[SECURITY] Fedora 7 Update: thunderbird-2.0.0.9-1.fc7

Mozilla Thunderbird is a standalone mail and newsgroup client...

Evolution: User-assisted remote execution of arbitrary code

Background Evolution is the mail client of the GNOME desktop environment. Camel is the Evolution Data Server module that handles mail functions. Description The imaprescan function of the file camel-imap-folder.c does not properly sanitize the "SEQUENCE" response sent by an IMAP server before bei...

[SECURITY] Fedora Core 6 Update: thunderbird-1.5.0.12-3.fc6

Mozilla Thunderbird is a standalone mail and newsgroup client...

CVE-2002-2338

The CVE-2002-2338 issue affects the POP3 client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier. A remote attacker can trigger a denial of service (no new mail) by sending a mail message containing a dot (.) at a newline, which is treated as the end of the message. The root ...

CVE-2002-2338

The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service no new mail via a mail message containing a dot . at a newline, which is interpreted as the end of the message...