Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Debian 4.0 DSA-1621-1 Critical: Icedove Code Execution Problems

debian
Calendar Grey July 27, 2008
Scroller Debian
The Debian Security Bulletin DSA-1621-1 discusses several vulnerabilities leading to remote code execution found in the Icedove email client, with patches released.
It was discovered that a buffer overflow in MIME decoding can lead to the execution of arbitrary code.
Topics%20covered

Topics Covered

security advisory buffer overflow remote code execution debian icedove mail client

Summary


It was discovered that a buffer overflow in MIME decoding can lead
to the execution of arbitrary code.

CVE-2008-2785

It was discovered that missing boundary checks on a reference
counter for CSS objects can lead to the execution of arbitrary code.

CVE-2008-2798

Devon Hubbard, Jesse Ruderman and Martijn Wargers discovered
crashes in the layout engine, which might allow the execution of
arbitrary code.

CVE-2008-2799

Igor Bukanov, Jesse Ruderman and Gary Kwong discovered crashes in
the Javascript engine, which might allow the execution of arbitrary code.

CVE-2008-2802

"moz_bug_r_a4" discovered that XUL documements can escalate
privileges by accessing the pre-compiled "fastload" file.

CVE-2008-2803

"moz_bug_r_a4" discovered that missing input sanitising in the
mozIJSSubScriptLoader.loadSubScript() function could lead to the
execution of arbitrary code. Iceweasel itself is not affected, but
some addons are.

CVE-2008-...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory buffer overflow remote code execution debian icedove mail client

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.