CVE-2014-9116 in Mutt
Zusammenfassung (Englisch)
The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.
Reservieren
26.11.2014
Veröffentlichung
02.12.2014
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 68290 | Mutt mutt_substrdup Pufferüberlauf | 119 | Unbewiesen | Workaround | CVE-2014-9116 |