medium6.8
CVE-2014-0469
Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an…
Impact
Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an email, possibly related to indent subject lines.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Xbuffy | through 3.3.bl.3.dfsg-8 Versions 3.2.1-1, 3.2.1-2, 3.2.1-3, 3.2.1-4, 3.3-1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packages.qa.debian.org/x/xbuffy/news/20140427T181904Z.html
- http://www.debian.org/security/2014/dsa-2921
- http://www.openwall.com/lists/oss-security/2014/04/28/3
- http://www.securityfocus.com/bid/67090
- http://packages.qa.debian.org/x/xbuffy/news/20140427T181904Z.html
- http://www.debian.org/security/2014/dsa-2921
- http://www.openwall.com/lists/oss-security/2014/04/28/3
- http://www.securityfocus.com/bid/67090