Description
Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.
References
- oval:org.mitre.oval:def:11042 vdb-entry signature
- 10856 third-party-advisory
- http://bugzilla.mozilla.org/show_bug.cgi?id=229374
- SUSE-SA:2004:036 vendor-advisory
- RHSA-2004:421 vendor-advisory
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
- FLSA:2089 vendor-advisory
- mozilla-senduidl-pop3-bo(16869) vdb-entry
- 15495 vdb-entry
- oval:org.mitre.oval:def:3250 vdb-entry signature
- VU#561022 third-party-advisory