S-207: Mozilla Vulnerability in External MIME bodies


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-207: Mozilla Vulnerability in External MIME bodies
# 1  
Old 02-27-2008
S-207: Mozilla Vulnerability in External MIME bodies

There is a heap-based buffer overflow vulnerability in Mozilla mail code which could potentially allow an attacker to run arbitrary code. The risk is MEDIUM. COuld potentially allow an attacker to run arbitrary code. The vulnerability is caused by allocating a buffer that can be three bytes too small in certain cases when viewing an email message with an external MIME body.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

7 More Discussions You Might Find Interesting

1. Solaris

command line MIME?

Is there a commandline MIME encoder? standard on solaris 10. (a-la uuencode) (2 Replies)
Discussion started by: bigearsbilly
2 Replies

2. Shell Programming and Scripting

Sending Attachment using MIME in UNIX

Hi, I am using the below code for sending attachment in UNIX but only blank attachment is coming in email even the content is not coming. Please help!!! export CONTENT="${DIR}/${RUN_DATE}_mailbody.txt" export SUBJECT="Search Result for Pattern - ${1}" export ATTACH=${2} ( echo... (9 Replies)
Discussion started by: rajesshh
9 Replies

3. Shell Programming and Scripting

ambigouity on using Mime::Lite?

Hi Everyone, I have a question related to using MIME::Lite module in perl.Below i mentioned code blocks used for sending mail through MIME::Lite. $msg = MIME::Lite -> new ( From => $from, To => $to, Subject... (0 Replies)
Discussion started by: DILEEP410
0 Replies

4. Shell Programming and Scripting

Retrieving File's Mime-type

Alright, so I am trying to use perl (or any other shell scripting language, awk/sed/bash for instance), to retrieve the mime-type of a file. I want to keep it in one file, and most of the modules that are on cpan that check for mime types (Magic), aren't installed on these boxes. Anyone have... (2 Replies)
Discussion started by: Rhije
2 Replies

5. Shell Programming and Scripting

help with mime

hey, i need some help with mime and hebrew. i have a script sending a multipart mime . the problem is that the subject is recived in jibrish. i need to know how to explictly define charset for the subject. i would appericiate any help, thanx in advance, rafi (0 Replies)
Discussion started by: rafiyaari
0 Replies

6. UNIX for Dummies Questions & Answers

mime types

Hi, I am trying to launch an ogg movie from a pdf file which has been produced with pdflatex and \movie {\centerline{\includegraphics {grafiques_xerrades/un_manolo_amb_camera.pdf}}} {hlims_xerrades/XocCumuls.ogg} The switch "externalviewer" makes kpdf launch the default... (5 Replies)
Discussion started by: pau
5 Replies

7. UNIX for Advanced & Expert Users

How to Set Mime type to mailx

I have a problem while sending attachement , it is displying Content into body of mail (Junk Data) instead of attachment (zip format) in Linux, same code is working in Sun Solaris.. I have read query in this site , need to set MIME type to mailx componment. Please help me how to set MIME type..... (1 Reply)
Discussion started by: suneel
1 Replies
Login or Register to Ask a Question
asadmin-create-mime(1AS)					   User Commands					  asadmin-create-mime(1AS)

NAME
create-mime - adds the MIME type SYNOPSIS
create-mime --user admin_user[--password admin_password][--host localhost] [--port 4848][--passwordfile filename][--secure|-s][--instance instance_name] --mimefile filename mime_ID Adds the MIME type associated with the named server instance. The server determines the MIME type of a requested resource by invoking the type-by-extension directive in the ObjectType section of the obj.conf file. The type-by-extension function does not work if no MIME element has been defined in the server element. OPTIONS
--user administrative user associated for the instance. --password administrative password corresponding to the administrative user. --host host name of the machine hosting the administrative instance. --port administrative port number associated with the administrative host. --passwordfile file containing passwords appropriate for the command (e.g., administrative instance). --secure if true, uses SSL/TLS to communicate with the administrative instance. --instance name of the instance. --mimefile name of a MIME types file. OPERANDS
mime_id internal name for the MIME types listing. It is used in a virtual-server element to define the MIME types used by the virtual server. Example 1: Using create-mime asadmin> create-mime --user admin --password adminadmin --host fuyako --port 7070 --instance server1 --mimefile mime.types sampleMIME Created Mime with id = sampleMIME Where: sampleMIME is the name of the MIME created. EXIT STATUS
0 command executed successfully 1 error in executing the command INTERFACE EQUIVALENT
HTTP Server node, MIME Type Files page asadmin-delete-mime(1AS), asadmin-list-mimes(1AS) J2EE 1.4 SDK March 2004 asadmin-create-mime(1AS)