Buffer overflow in the GMIME_UUENCODE_LEN macro in gmime/gmime-encodings.h in GMime before 2.4.15 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via input data for a uuencode operation.

The remote host is affected by the vulnerability described in GLSA-201401-19 (GMime: Arbitrary code execution)

    GMime contains a buffer overflow flaw in the GMIME_UUENCODE_LEN macro in       gmime/gmime-encodings.h.
  Impact :

    A context-dependent attacker could possibly execute arbitrary code or       cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

It was discovered that a buffer overflow in the MIME library GMime might lead to the execution of arbitrary code.

This update of gmime fixes a buffer overflow in the GMIME_UUENCODE_LEN macro which allowed possible code execution while processing uuencoded data. (CVE-2010-0409: CVSS v2 Base Score: 5.8)

ID	Name	Product	Family	Severity
72074	GLSA-201401-19 : GMime: Arbitrary code execution	Nessus	Gentoo Local Security Checks	high
48225	Debian DSA-2082-1 : gmime2.2 - buffer overflow	Nessus	Debian Local Security Checks	high
44908	SuSE 11 Security Update : gmime (SAT Patch Number 1998)	Nessus	SuSE Local Security Checks	high
44905	openSUSE Security Update : gmime-2_4 (gmime-2_4-1983)	Nessus	SuSE Local Security Checks	high
44904	openSUSE Security Update : gmime (gmime-1997)	Nessus	SuSE Local Security Checks	high
44902	openSUSE Security Update : gmime (gmime-1997)	Nessus	SuSE Local Security Checks	high
44900	openSUSE Security Update : gmime (gmime-1997)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2010-0409

critical

Tenable Plugins

high

high

high

high

high

high

high