Candidate: CVE-2015-8614
PublicDate: 2016-04-11 21:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8614
 http://git.claws-mail.org/?p=claws.git;a=commit;h=d390fa07f5548f3173dd9cc13b233db5ce934c82 (3.13.1)
 http://git.claws-mail.org/?p=claws.git;a=commitdiff;h=e3ffcb455e0376053451ce968e6c71ef37708222 (not yet in tagged release)
 http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3557
 http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3584
 https://bugs.gentoo.org/show_bug.cgi?id=569010
Description:
 Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2)
 conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail
 before 3.13.1 allow remote attackers to have unspecified impact via a
 crafted email, involving Japanese character set conversion.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L [7.3 HIGH]

Patches_macopix:
upstream_macopix: released (1.7.4-6)
precise_macopix: ignored (reached end-of-life)
precise/esm_macopix: DNE (precise was needed)
trusty_macopix: ignored (reached end-of-life)
trusty/esm_macopix: DNE (trusty was needed)
vivid_macopix: ignored (reached end-of-life)
vivid/stable-phone-overlay_macopix: DNE
vivid/ubuntu-core_macopix: DNE
wily_macopix: ignored (reached end-of-life)
xenial_macopix: ignored (end of standard support, was needed)
yakkety_macopix: not-affected (1.7.4-6)
zesty_macopix: not-affected
artful_macopix: not-affected
bionic_macopix: not-affected
cosmic_macopix: not-affected
disco_macopix: not-affected
eoan_macopix: not-affected
focal_macopix: not-affected
groovy_macopix: not-affected
hirsute_macopix: not-affected
impish_macopix: not-affected
jammy_macopix: not-affected
devel_macopix: not-affected

Patches_claws-mail:
upstream_claws-mail: released (3.13.1-1)
precise_claws-mail: ignored (reached end-of-life)
precise/esm_claws-mail: DNE (precise was needed)
trusty_claws-mail: ignored (reached end-of-life)
trusty/esm_claws-mail: DNE (trusty was needed)
vivid_claws-mail: ignored (reached end-of-life)
vivid/stable-phone-overlay_claws-mail: DNE
vivid/ubuntu-core_claws-mail: DNE
wily_claws-mail: ignored (reached end-of-life)
xenial_claws-mail: not-affected (3.13.2-1ubuntu1)
yakkety_claws-mail: ignored (reached end-of-life)
zesty_claws-mail: ignored (reached end-of-life)
artful_claws-mail: ignored (reached end-of-life)
bionic_claws-mail: not-affected (3.13.2-1ubuntu1)
cosmic_claws-mail: not-affected (3.13.2-1ubuntu1)
disco_claws-mail: not-affected (3.13.2-1ubuntu1)
eoan_claws-mail: not-affected (3.13.2-1ubuntu1)
focal_claws-mail: not-affected (3.13.2-1ubuntu1)
groovy_claws-mail: not-affected (3.13.2-1ubuntu1)
hirsute_claws-mail: not-affected (3.13.2-1ubuntu1)
impish_claws-mail: not-affected (3.13.2-1ubuntu1)
jammy_claws-mail: not-affected (3.13.2-1ubuntu1)
devel_claws-mail: not-affected (3.13.2-1ubuntu1)