PT-2003-1387 · Ximian · Ximian Evolution Mail User Agent

Publicado

2003-03-21

·

Atualizado

2017-10-11

·

CVE-2003-0128

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Ximian Evolution Mail User Agent versions 1.2.2 and earlier
Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malicious uuencoded (UUE) header, potentially triggering a heap-based buffer overflow. This is due to a problem in the try uudecoding function in mail-format.c.
Recommendations For Ximian Evolution Mail User Agent versions 1.2.2 and earlier, consider disabling the try uudecoding function as a temporary workaround until a patch is available. Restrict the handling of uuencoded headers to minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2003-0128

Produtos afetados

Ximian Evolution Mail User Agent