905 matches found
Mutt: Heap-based buffer overflow
Background Mutt is a small but very powerful text-based mail client. Description A heap-based buffer overflow was discovered in Mutt’s muttsubstrdup function. Impact A remote attacker could cause a Denial of Service condition. Workaround There is no known workaround at this time. Resolution All...
CVE-2016-9920
steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enabled, does not properly restrict the use of custom envelope-from addresses on the sendmail command line, which allows remote authenticated users to execute...
[SECURITY] Fedora 25 Update: thunderbird-45.5.1-1.fc25
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 24 Update: thunderbird-45.5.1-1.fc24
Mozilla Thunderbird is a standalone mail and newsgroup client...
Mozilla Thunderbird < 45.5.1 nsSMILTimeContainer.cpp SVG Animation RCE (macOS)
The version of Mozilla Thunderbird installed on the remote macOS or Mac OS X host is prior to 45.5.1. It is, therefore, affected by a use-after-free error in dom/smil/nsSMILTimeContainer.cpp when handling SVG animations. An unauthenticated, remote attacker can exploit this issue, via a specially...
189 Mail Client for Android Gesture Password Bypass Vulnerability
189 mailbox client is a new generation of mailbox service provided by China Telecom for C-network cell phone users and broadband users. A gesture password bypass vulnerability exists in the Android version of 189 Mail Client. The vulnerability allows attackers to use the gesture lock settings to...
WoMail Client for Android - Gesture Password Bypass Vulnerability
Wo Mailbox Client is an email sending and receiving application from China Unicom. A gesture password bypass vulnerability exists in the Android version of Vo Mail Client. The vulnerability allows attackers to bypass the gesture lock to send emails after using the gesture lock setting...
Secure Mail - Error: Access to your company network is not available
Secure Mail Client when entering the Mail Server FQDN for first time sync returns the Error "Access to your company network is not available"...
Cisco Email and Web Security Appliance Malformed MIME Header Vulnerability
A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA and Web Security Appliances WSA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to...
XSS Vulnerability in NetEase Mail Client IOS Version
NetEase Mail Client is a general-purpose email client launched by NetEase 163. An XSS vulnerability exists in the IOS version Ver3.9 of NetEase Mail Client. It allows attackers to insert malicious js code in the page to obtain user cookies and other information, resulting in user hijacking...
[SECURITY] Fedora 24 Update: thunderbird-45.3.0-1.fc24
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 25 Update: thunderbird-45.3.0-1.fc25
Mozilla Thunderbird is a standalone mail and newsgroup client...
McAfee Email Gateway - Application Protections Bypass
MEG is vulnerable to file attachments containing the null character. The scanning mechanism fails to identify the file name properly. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
[SECURITY] Fedora 24 Update: thunderbird-45.1.0-2.fc24
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] [DSA 3576-1] icedove security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3576-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 13, 2016 https://www.debian.org/security/faq -...
[SECURITY] Fedora 22 Update: thunderbird-45.0-2.fc22
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 24 Update: thunderbird-45.0-2.fc24
Mozilla Thunderbird is a standalone mail and newsgroup client...
Debian Security Advisory DSA 3432-1 (icedove - security update)
Multiple security issues have been found in Icedove, Debian OpenVAS Vulnerability Test $Id: deb3432.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3432-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbone Networks GmbH...