Description
Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an email, possibly related to indent subject lines.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/67090
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2014/dsa-2921
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/04/28/3
Various Sources x_refsource_confirm
http://packages.qa.debian.org/x/xbuffy/news/20140427T181904Z.html
Scores
EPSS
0.0343
EPSS Percentile
87.5%
Details
CWE
CWE-119
Status
published
Products (39)
debian/xbuffy
3.2.1-1
debian/xbuffy
3.2.1-2
debian/xbuffy
3.2.1-3
debian/xbuffy
3.2.1-4
debian/xbuffy
3.3-1
debian/xbuffy
3.3.b1.3-4
debian/xbuffy
3.3.bl.2-1
debian/xbuffy
3.3.bl.3-1
debian/xbuffy
3.3.bl.3-2
debian/xbuffy
3.3.bl.3-3
... and 29 more
Published
May 05, 2014
Tracked Since
Feb 18, 2026