| Package | Affected versions | Patched versions |
|---|---|---|
| xbuffy | = 3.2.1-1= 3.2.1-2= 3.2.1-3= 3.2.1-4= 3.3-1= 3.3.b1.3-4= 3.3.bl.2-1= 3.3.bl.3-1= 3.3.bl.3-10= 3.3.bl.3-11= 3.3.bl.3-12= 3.3.bl.3-13= 3.3.bl.3-14= 3.3.bl.3-15= 3.3.bl.3-16= 3.3.bl.3-17= 3.3.bl.3-18= 3.3.bl.3-19= 3.3.bl.3-2= 3.3.bl.3-20= 3.3.bl.3-21= 3.3.bl.3-22= 3.3.bl.3-23= 3.3.bl.3-24= 3.3.bl.3-25= 3.3.bl.3-3= 3.3.bl.3-5= 3.3.bl.3-6= 3.3.bl.3-7= 3.3.bl.3-8= 3.3.bl.3-9= 3.3.bl.3.dfsg-1= 3.3.bl.3.dfsg-2= 3.3.bl.3.dfsg-3= 3.3.bl.3.dfsg-4= 3.3.bl.3.dfsg-5= 3.3.bl.3.dfsg-6= 3.3.bl.3.dfsg-7≤ 3.3.bl.3.dfsg-8 |
Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an email, possibly related to indent subject lines.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free