Claws Mail Plugins 'sc_html_read_line()' Function Memory Corruption Vulnerability

Bugtraq ID:	68526
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 01 2014 12:00AM
Updated:	Apr 13 2015 08:30PM
Credit:	Fabian Keil
Vulnerable:
Not Vulnerable:

Claws Mail Plugins 'sc_html_read_line()' Function Memory Corruption Vulnerability

Claws Mail Plugins is prone to a memory corruption vulnerability because it fails to perform adequate boundary-checks on user-supplied data.

Attackers may leverage this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Claws Mail Plugins 3.10.0 is vulnerable.

Claws Mail Plugins 'sc_html_read_line()' Function Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Claws Mail Plugins 'sc_html_read_line()' Function Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Claws Mail Plugins 'sc_html_read_line()' Function Memory Corruption Vulnerability

References:

• Claws Mail Homepage (Claws Mail)
  
• Patch to fix memory corruption in sc_html_read_line() (Claws Mail Bugzilla)
  
• claws-mail: stack-based off-by-one in HTML parsing (Red Hat Bugzilla)