CVE-2003-0855 Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.
HighCVSS 7.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| charles kerr pan | <= 0.13.3 | No fix listed |
| debian/pan(Debian:12) | < 0.13.4-1 | 0.13.4-1 |
| debian/pan(Debian:13) | < 0.13.4-1 | 0.13.4-1 |
| debian/pan(Debian:14) | < 0.13.4-1 | 0.13.4-1 |
References
- bugzilla.gnome.org exploit patch
- bugzilla.redhat.com vendor-advisory
- RHSA-2003:311 vendor-advisory
- RHSA-2003:312 vendor-advisory
- Debian Security Tracker CVE-2003-0855 vendor-advisory