Description
Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header.
References (4)
Core 4
Core References
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1218
Patch, Vendor Advisory x_refsource_confirm
http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2010/dsa-2049
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39908
Scores
EPSS
0.0381
EPSS Percentile
88.8%
Details
CWE
CWE-119
Status
published
Products (16)
barnowl/barnowl
1.0.0
barnowl/barnowl
1.0.1
barnowl/barnowl
1.0.2
barnowl/barnowl
1.0.2.1
barnowl/barnowl
1.0.3
barnowl/barnowl
1.0.4
barnowl/barnowl
1.0.4.1
barnowl/barnowl
1.0.5
barnowl/barnowl
1.1
barnowl/barnowl
1.1.1
... and 6 more
Published
Mar 16, 2010
Tracked Since
Feb 18, 2026