[Bug 330062] New: A certain mail header causes Pine to crash
https://bugzilla.novell.com/show_bug.cgi?id=330062 Summary: A certain mail header causes Pine to crash Product: openSUSE 10.2 Version: Final Platform: i686 OS/Version: openSUSE 10.2 Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: robin.listas@telefonica.net QAContact: qa@suse.de Found By: --- Created an attachment (id=175926) --> (https://bugzilla.novell.com/attachment.cgi?id=175926) mbox folder copy of the email causing the crash. I got an spam email with this subject line: Subject: **)( *)(!+**] ]:[]:!! This causes Pine to crash when I try to open it. According to the developer (Eduardo Chappa), this is caused by a bug in the fillpara patch, which your version of Pine has. This has been solved upstream. It is not known to be exploitable, but Eduardo says it smells like it. Thus I filled this as a security bug. I assume this affects all SuSE Pine versions, but I have only tested it in 10.2 Please, consider also including the new version of Pine, named Alpine, which is now at version 0.9999. The development of Pine stopped a year ago. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=330062#c1 Gerald Pfeifer <gp@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |gp@novell.com --- Comment #1 from Gerald Pfeifer <gp@novell.com> 2007-10-06 05:58:51 MST --- Re replacing Pine by Alpine, this is being tracked as FATE #302834 and we plan to open this aspect of FATE soon so that you will be able to follow it. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=330062 User meissner@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=330062#c2 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |DUPLICATE --- Comment #2 from Marcus Meissner <meissner@novell.com> 2008-03-13 15:59:17 MST --- is a dup of another bug with a very similar mail. *** This bug has been marked as a duplicate of bug 325967 *** https://bugzilla.novell.com/show_bug.cgi?id=325967 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com