CVE-2006-5877

Published: 23 February 2007

The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cause a denial of service (crash), as demonstrated with Mozilla Thunderbird.

Priority

Status

Package	Release	Status
enigmail Launchpad, Ubuntu, Debian	dapper	Released (0.94-0ubuntu4.5)
	edgy	Released (0.94-0ubuntu5.3)
	feisty	Released (0.94.2-0ubuntu3)
	upstream	Needs triage

References

https://ubuntu.com/security/notices/USN-427-1
https://www.cve.org/CVERecord?id=CVE-2006-5877
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.