|
|
CVE Reference: CVE-2003-0130 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2003-0130 |
|
|
Description: The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image. |
|
|
CVE Status: Candidate |
|
|
References: REDHAT http://www.redhat.com/support/errata/RHSA-2003-108.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:111 MISC http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10 MANDRAKE http://www.mandriva.com/security/advisories?name=MDKSA-2003:045 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200303-18.xml CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000648 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=104826470527308&w=2 http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0141.html BID 7119 |
|
| Return to the previous page. |
