LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Recent Features

Btrfs aims for the mainline

The Android Dev Phone 1

LWN.net Weekly Edition for December 25, 2008

The Grumpy Editor's 2008 retrospective

The 2008 Linux and free software timeline

Printable page
Weekly edition Kernel Security Distributions Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ

thunderbird: buffer overflow

Package(s):mozilla-thunderbird, thunderbird CVE #(s):CVE-2008-4070
Created:September 26, 2008 Updated:November 21, 2008
Description: From the Ubuntu advisory: Georgi Guninski discovered that Thunderbird improperly handled canceled newsgroup messages. If a user opened a crafted newsgroup message, an attacker could cause a buffer overrun and potentially execute arbitrary code with the privileges of the user invoking the program.
Alerts:
Ubuntu USN-647-1 2008-09-26
Mandriva MDVSA-2008:206 2008-09-26
Slackware SSA:2008-270-01 2008-09-29
Red Hat RHSA-2008:0908-01 2008-10-01
CentOS CESA-2008:0908 2008-10-06
SuSE SUSE-SA:2008:050 2008-10-08
Fedora FEDORA-2008-9807 2008-11-21
Fedora FEDORA-2008-9859 2008-11-21
(Log in to post comments)

Copyright © 2009, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds