The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Outlook_express | Microsoft | 6.00.2800.1106 (including) | 6.00.2800.1106 (including) |
| Mozilla | Mozilla | 1.3 (including) | 1.3 (including) |
| Mozilla | Mozilla | 1.4-alpha (including) | 1.4-alpha (including) |
| Mutt | Mutt | 1.4.1 (including) | 1.4.1 (including) |
| Eudora | Qualcomm | 5.2.1 (including) | 5.2.1 (including) |
| Balsa | Stuart_parmenter | 2.0.10 (including) | 2.0.10 (including) |
| Sylpheed_email_client | Sylpheed | 0.8.11 (including) | 0.8.11 (including) |
| Pine | University_of_washington | 4.53 (including) | 4.53 (including) |
| Evolution | Ximian | 1.2.4 (including) | 1.2.4 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=105294024124163\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=105294024124163\u0026w=2