Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character.
References
Link | Resource |
---|---|
http://sourceforge.net/project/shownotes.php?release_id=422662&group_id=25528 | Patch |
http://secunia.com/advisories/20476 | Patch Vendor Advisory |
http://secunia.com/advisories/20577 | Vendor Advisory |
http://www.vupen.com/english/advisories/2006/2283 | Vendor Advisory |
http://www.vupen.com/english/advisories/2006/2173 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/27089 | |
http://sylpheed.good-day.net/en/news.html\ | Broken Link |
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-06-08 18:02
Updated : 2018-08-13 14:47
NVD link : CVE-2006-2920
Mitre link : CVE-2006-2920
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
sylpheed
- sylpheed
sylpheed-claws
- sylpheed-claws