Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Debian 4.0: DSA 1391-1 Critical: Icedove Remote Threats

debian
Calendar Grey October 19, 2007
Debian Logo
Delve into Debian's notification regarding icedove adjustments addressing various external vulnerabilities, prioritizing user security against potential code execution threats.
Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client
Topics%20covered

Topics Covered

security advisory code execution Debian remote issue update recommendation Icedove

Summary


Bernd Mielke, Boris Zbarsky, David Baron, Daniel Veditz, Jesse Ruderman,
Lukas Loehrer, Martijn Wargers, Mats Palmgren, Olli Pettay, Paul
Nickerson and Vladimir Sukhoy discovered crashes in the layout engine,
which might allow the execution of arbitrary code.

CVE-2007-3735

Asaf Romano, Jesse Ruderman and Igor Bukanov discovered crashes in the
javascript engine, which might allow the execution of arbitrary code.

CVE-2007-3844

"moz_bug_r_a4" discovered that a regression in the handling of
"about:blank" windows used by addons may lead to an attacker being
able to modify the content of web sites.

CVE-2007-3845

Jesper Johansson discovered that missing sanitising of double-quotes
and spaces in URIs passed to external programs may allow an attacker
to pass arbitrary arguments to the helper program if the user is
tricked into opening a malformed web page.

CVE-2007-5339

L. David Baron, Boris Zbarsky, Georgi Guninski, Paul Nick...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory code execution Debian remote issue update recommendation Icedove

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here