From: SL Baur <steve@xemacs.org>
Subject: Re: [Brent Welch <welch@scriptics.com>] MIME attack on Microsoft and Netscape mail readers
Date: 29 Jul 1998 17:35:59 -0700 [thread overview]
Message-ID: <m2sojkrx8w.fsf@altair.xemacs.org> (raw)
In-Reply-To: Eze Ogwuma's message of "29 Jul 1998 23:57:49 +0100"
Eze Ogwuma <typhoon@dircon.co.uk> writes in ding@gnus.org:
> Hi,
> Does anyone have any thoughts on this and its possible interaction
> with Gnus and TM?
Brent Welch writes:
>> "Recent news articles about security flaws in Microsoft and Netscape mail
>> readers concern an attack on MIME handling.
>> Exmh implements MIME handling in Tcl code that is unaffected by
>> buffer overflow type attacks. There are no fixed sized buffers
>> in the implementation of Tcl itself, so it is not possible to
>> trick Exmh into executing arbitrary code by sending it
>> MIME attachments with extremely long file names."
XEmacs 20.2 and 19.16 are vulnerable to stack overrun if
`directory-files' is passed an over-long name. I see one usage of
`directory-files' in tmh-comp.el, but it is used with data typed in by
a user instead of data extracted from a mail message. This bug is
fixed in XEmacs 20.3 and 20.4.
Personally, I'm a lot more worried about specially constructed
images displayed in-line. The XEmacs image code has never been
paranoid enough to satisfy my tastes, though it's better in the
current sources.
next prev parent reply other threads:[~1998-07-30 0:35 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
1998-07-29 22:57 Eze Ogwuma
1998-07-30 0:35 ` SL Baur [this message]
1998-07-30 0:43 ` William M. Perry
1998-07-31 6:25 ` SL Baur
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=m2sojkrx8w.fsf@altair.xemacs.org \
--to=steve@xemacs.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).