Description
Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type.
Affected products
- university_of_washington / pine3.98 – 3.98
- university_of_washington / pine4.0.2 – 4.0.2
- university_of_washington / pine4.0.4 – 4.0.4
- university_of_washington / pine4.10 – 4.10
- university_of_washington / pine4.20 – 4.20
- university_of_washington / pine4.21 – 4.21
- university_of_washington / pine4.30 – 4.30
- university_of_washington / pine4.33 – 4.33
- university_of_washington / pine4.44 – 4.44
- university_of_washington / pine4.50 – 4.50
- university_of_washington / pine4.52 – 4.52
- university_of_washington / pine4.53 – 4.53
- university_of_washington / pine4.56 – 4.56
References
- MISChttp://www.redhat.com/support/errata/RHSA-2003-274.html
- MISChttp://archives.neohapsis.com/archives/vulnwatch/2003-q3/0099.html
- MAILING_LISThttp://marc.info/?l=bugtraq&m=106329356702508&w=2
- MISChttp://www.redhat.com/support/errata/RHSA-2003-273.html
- MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A499
- MISChttp://www.idefense.com/advisory/09.10.03.txt
- MAILING_LISThttp://marc.info/?l=bugtraq&m=106322571805153&w=2