[SECURITY] [DSA 1305-1] New icedove packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1305-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 13th, 2007 http://www.debian.org/security/faq -...

DSA-1305-1 icedove - several vulnerabilities

Bulletin has no description...

[SECURITY] Fedora Core 5 Update: thunderbird-1.5.0.12-1.fc5

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora Core 6 Update: thunderbird-1.5.0.12-1.fc6

Mozilla Thunderbird is a standalone mail and newsgroup client...

vista-pwn.txt

Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability Successfully Tested on Windows Vista Ultimate Greetings fly out to Alex,wtfomg,Thierry,Andi and Blackzero Description Windows Mail is the default Mail Client of Microsoft Windows Vista. Vulnerability Remote Code...

[SECURITY] Fedora Core 6 Update: thunderbird-1.5.0.10-1.fc6

Mozilla Thunderbird is a standalone mail and newsgroup client...

GnuPG and GnuPG clients unsigned data injection vulnerability

Advisory ID Internal CORE-2007-0115 Date Published: 2007-03-05 Last Update: 2007-03-05 Advisory ID: CORE-2007-0115 Bugtraq IDs: BID 22757 - GnuPG BID 22758 - Enigmail BID 22759 - KMail BID 22760 - Evolution BID 22777 - Sylpheed BID 22778 - Mutt BID 22779 - GNUMail CVE Names: CVE-2007-1263 for the...

Critical: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 06 March 2007 Updated text description to add CVE-2007-1282 and remove...

Mandrake Linux Security Advisory : mutt (MDKSA-2006:190)

A race condition in the safeopen function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the OEXCL flag on NFS filesystems. CVE-2006-5297 The muttadvmktemp function in...

MailEnable Web Mail Client Multiple Vulnerabilities (XSS, CSRF)

The Web Mail Client bundled with the version of MailEnable installed on the remote host reportedly fails to properly sanitize email messages and various script parameters of malicious script code, which can lead to cross-site scripting, cross-site request forgery, and script insertion attacks...

[Full-disclosure] Secunia Research: MailEnable Web Mail Client Multiple Vulnerabilities

====================================================================== Secunia Research 14/02/2007 - MailEnable Web Mail Client Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...

Fedora Core 6 : thunderbird-1.5.0.9-2.fc6 (2006-1491)

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the way Thunderbird processes certain malformed JavaScript code. A malicious web page could cause the execution of JavaScript code in such a way that could cause Thunderbird to crash or execute arbitrary co...

Fedora Core 5 : thunderbird-1.5.0.2-1.1.fc5 (2006-490)

Updated thunderbird packages that fix various bugs are now available for Fedora Core 4. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several bugs were found in the way Thunderbird...

Fedora Core 6 : thunderbird-1.5.0.8-1.fc6 (2006-1192)

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the way Thunderbird processes certain malformed JavaScript code. A malicious HTML mail message could cause the execution of JavaScript code in such a way that could cause Thunderbird to crash or execute...

GLSA-200612-03 : GnuPG: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200612-03 GnuPG: Multiple vulnerabilities Hugh Warrington has reported a boundary error in GnuPG, in the 'askoutfilename' function from openfile.c: the makeprintablestring function could return a string longer than expected...

GLSA-200611-01 : Screen: UTF-8 character handling vulnerability

The remote host is affected by the vulnerability described in GLSA-200611-01 Screen: UTF-8 character handling vulnerability cstone and Richard Felker discovered a flaw in Screen's UTF-8 combining character handling. Impact : The vulnerability can be exploited by writing a special string of...

CVE-2006-5298

The muttadvmktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safefopen function cal...

CVE-2006-5297

Race condition in the safeopen function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the OEXCL flag on NFS filesystems...

DEBIAN-CVE-2006-5297

Race condition in the safeopen function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the OEXCL flag on NFS filesystems...

DEBIAN-CVE-2006-5298

The muttadvmktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safefopen function cal...