CVE-2009-0363

CVE-2009-0363 affects BarnOwl prior to 1.0.5 and Owl prior to 2.1.11. Multiple buffer overflows could allow remote code execution via (1) crafted zcrypt messages (zcrypt.c) or (2) a reply command on a message with a Zephyr Cc: list (zwrite.c), plus unspecified other uses. No patch/version fix is ...