CVE-2003-0128 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2003-0128
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0128

Description: The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malicious uuencoded (UUE) header, possibly triggering a heap-based buffer overflow.

CVE Status: Candidate

References: REDHAT http://www.redhat.com/support/errata/RHSA-2003-108.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:107 MISC http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10 MANDRAKE http://www.mandriva.com/security/advisories?name=MDKSA-2003:045 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200303-18.xml CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000648 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=104826470527308&w=2 http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0141.html BID 7117

Return to the previous page.