CVEvulnerability

CVE-2014-0469

6.8 MEDIUM Published 2014-05-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an email, possibly related to indent subject lines.

Affected configurations

• debian xbuffy (<= 3.3.bl.3.dfsg-8) • debian xbuffy 3.2.1-1 • debian xbuffy 3.2.1-2 • debian xbuffy 3.2.1-3 • debian xbuffy 3.2.1-4 • debian xbuffy 3.3-1 • debian xbuffy 3.3.b1.3-4 • debian xbuffy 3.3.bl.2-1 • debian xbuffy 3.3.bl.3-1 • debian xbuffy 3.3.bl.3-2 • debian xbuffy 3.3.bl.3-3 • debian xbuffy 3.3.bl.3-5 • debian xbuffy 3.3.bl.3-6 • debian xbuffy 3.3.bl.3-7 • debian xbuffy 3.3.bl.3-8 • debian xbuffy 3.3.bl.3-9 • debian xbuffy 3.3.bl.3-10 • debian xbuffy 3.3.bl.3-11 • debian xbuffy 3.3.bl.3-12 • debian xbuffy 3.3.bl.3-13 • debian xbuffy 3.3.bl.3-14 • debian xbuffy 3.3.bl.3-15 • debian xbuffy 3.3.bl.3-16 • debian xbuffy 3.3.bl.3-17 • debian xbuffy 3.3.bl.3-18 • debian xbuffy 3.3.bl.3-19 • debian xbuffy 3.3.bl.3-20 • debian xbuffy 3.3.bl.3-21 • debian xbuffy 3.3.bl.3-22 • debian xbuffy 3.3.bl.3-23 • debian xbuffy 3.3.bl.3-24 • debian xbuffy 3.3.bl.3-25 • debian xbuffy 3.3.bl.3.dfsg-1 • debian xbuffy 3.3.bl.3.dfsg-2 • debian xbuffy 3.3.bl.3.dfsg-3 • debian xbuffy 3.3.bl.3.dfsg-4 • debian xbuffy 3.3.bl.3.dfsg-5 • debian xbuffy 3.3.bl.3.dfsg-6 • debian xbuffy 3.3.bl.3.dfsg-7

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References