908 matches found
CentOS 4 : thunderbird (CESA-2006:0611)
Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. The Mozilla Foundation...
Mozilla Thunderbird: Multiple vulnerabilities
Background The Mozilla Thunderbird mail client is a redesign of the Mozilla Mail component. The goal is to produce a cross-platform stand-alone mail application using XUL XML User Interface Language. Description The following vulnerabilities have been reported: Benjamin Smedberg discovered that...
CVE-2006-2087
The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service application hang or erroneous behavior via an attachment with an MS-DOS device filename...
CVE-2006-2087
The CVE-2006-2087 entry concerns Hitachi Groupmax’s Gmax Mail client prior to 20060426. The vulnerability arises from processing an attachment with an MS-DOS device filename, which can cause a denial of service (application hang or erroneous behavior). Documented affected component: the Gmax Mail...
CVE-2006-2057
Argument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an...
Design/Logic Flaw
Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary...
Design/Logic Flaw
Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as a...
Design/Logic Flaw
Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as ...
CVE-2006-2058
Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as ...
CVE-2006-2057
Argument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an...
CVE-2006-2058
The CVE describes an argument-injection vulnerability in Avant Browser 10.1 Build 17 where user-supplied input in a mailto: link can modify the command line arguments passed to an invoked mail client (e.g., launching Outlook with a crafted filename attachment). The issue is triggered by untrusted...
CVE-2006-2056
Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary...
CVE-2006-2055
Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as a...
CVE-2006-2056
CVE-2006-2056 affects Internet Explorer 6 on Windows XP SP2. The vuln is an argument-injection flaw where an attacker can influence command line arguments passed to a launched mail client via double-quote characters in a mailto: handler, demonstrated by starting Outlook with an arbitrary attachme...
CVE-2006-2057
The CVE-2006-2057 issue affects Mozilla Firefox 1.0.6. It describes an argument injection vulnerability where user-assisted attackers could alter command line arguments of an invoked mail client via double-quote characters in a mailto: handler, demonstrated by launching Outlook with an arbitrary ...
CVE-2006-2058
Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as ...
PT-2006-3037 · Microsoft · Outlook +2
Name of the Vulnerable Software and Affected Versions: Internet Explorer 6 for Windows XP SP2 Description: The issue allows remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler. This can be demonstrated by launching...
PT-2006-3039 · Microsoft +1 · Outlook +1
Name of the Vulnerable Software and Affected Versions: Avant Browser version 10.1 Build 17 Description: The issue allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler. This can be demonstrated by...
thunderbird security update
CentOS Errata and Security Advisory CESA-2006:0330 Updated thunderbird packages that fix various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has bee...
