Description
Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/26550 ↗
- http://www.vupen.com/english/advisories/2007/2971 ↗
- http://secunia.com/advisories/26610 ↗
- http://secunia.com/secunia_research/2007-70/advisory/ ↗
- http://osvdb.org/40184 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=254121 ↗
- http://secunia.com/advisories/27229 ↗
- http://secunia.com/advisories/27379 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36238 ↗
- https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00077.html ↗
- http://security.gentoo.org/glsa/glsa-200710-29.xml ↗
- http://www.securityfocus.com/bid/25430 ↗
- http://www.novell.com/linux/security/advisories/2007_20_sr.html ↗
- http://bugs.gentoo.org/show_bug.cgi?id=190104 ↗