CVE-2014-0469: Buffer Overflow
Published May 5, 2014
·Updated
Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an email, possibly related to indent subject lines.
Affected Software
39 affected components
Debian xbuffy<=3.3.bl.3.dfsg-8
Debian xbuffy=3.2.1-1
Debian xbuffy=3.2.1-2
Debian xbuffy=3.2.1-3
Debian xbuffy=3.2.1-4
Debian xbuffy=3.3-1
Debian xbuffy=3.3.b1.3-4
Debian xbuffy=3.3.bl.2-1
Debian xbuffy=3.3.bl.3-1
Debian xbuffy=3.3.bl.3-2
Debian xbuffy=3.3.bl.3-3
Debian xbuffy=3.3.bl.3-5
Debian xbuffy=3.3.bl.3-6
Debian xbuffy=3.3.bl.3-7
Debian xbuffy=3.3.bl.3-8
Debian xbuffy=3.3.bl.3-9
Debian xbuffy=3.3.bl.3-10
Debian xbuffy=3.3.bl.3-11
Debian xbuffy=3.3.bl.3-12
Debian xbuffy=3.3.bl.3-13
Debian xbuffy=3.3.bl.3-14
Debian xbuffy=3.3.bl.3-15
Debian xbuffy=3.3.bl.3-16
Debian xbuffy=3.3.bl.3-17
Debian xbuffy=3.3.bl.3-18
Debian xbuffy=3.3.bl.3-19
Debian xbuffy=3.3.bl.3-20
Debian xbuffy=3.3.bl.3-21
Debian xbuffy=3.3.bl.3-22
Debian xbuffy=3.3.bl.3-23
Debian xbuffy=3.3.bl.3-24
Debian xbuffy=3.3.bl.3-25
Debian xbuffy=3.3.bl.3.dfsg-1
Debian xbuffy=3.3.bl.3.dfsg-2
Debian xbuffy=3.3.bl.3.dfsg-3
Debian xbuffy=3.3.bl.3.dfsg-4
Debian xbuffy=3.3.bl.3.dfsg-5
Debian xbuffy=3.3.bl.3.dfsg-6
Debian xbuffy=3.3.bl.3.dfsg-7
Event History
May 5, 2014
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:07 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0469?
CVE-2014-0469 has a moderate severity rating due to its potential to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2014-0469?
To mitigate CVE-2014-0469, update xbuffy to version 3.3.bl.3.dfsg-9 or later.
3
What systems are affected by CVE-2014-0469?
CVE-2014-0469 affects xbuffy versions before 3.3.bl.3.dfsg-9, including several earlier versions.
4
What type of attack does CVE-2014-0469 enable?
CVE-2014-0469 allows remote attackers to execute arbitrary code through a stack-based buffer overflow via email subjects.
5
When was CVE-2014-0469 disclosed?
CVE-2014-0469 was disclosed on April 27, 2014.