Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character.
                
            References
                    | Link | Resource | 
|---|---|
| http://sourceforge.net/project/shownotes.php?release_id=422662&group_id=25528 | Patch | 
| http://secunia.com/advisories/20476 | Patch Vendor Advisory | 
| http://secunia.com/advisories/20577 | Vendor Advisory | 
| http://www.vupen.com/english/advisories/2006/2283 | Vendor Advisory | 
| http://www.vupen.com/english/advisories/2006/2173 | Vendor Advisory | 
| https://exchange.xforce.ibmcloud.com/vulnerabilities/27089 | |
| http://sylpheed.good-day.net/en/news.html\ | Broken Link | 
Configurations
                    Configuration 1 (hide)
                                
                                
  | 
                        
Information
                Published : 2006-06-08 18:02
Updated : 2018-08-13 14:47
NVD link : CVE-2006-2920
Mitre link : CVE-2006-2920
JSON object : View
CWE
                
                    
                        
                        CWE-20
                        
            Improper Input Validation
Products Affected
                sylpheed
- sylpheed
 
sylpheed-claws
- sylpheed-claws
 


