Candidate: CVE-2015-8708 PublicDate: 2016-04-11 21:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8708 Description: Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L [7.3 HIGH] Patches_macopix: upstream_macopix: not-affected precise_macopix: ignored (reached end-of-life) precise/esm_macopix: DNE (precise was needed) trusty_macopix: not-affected trusty/esm_macopix: DNE (trusty was not-affected) vivid_macopix: ignored (reached end-of-life) vivid/stable-phone-overlay_macopix: DNE vivid/ubuntu-core_macopix: DNE wily_macopix: ignored (reached end-of-life) xenial_macopix: not-affected yakkety_macopix: ignored (reached end-of-life) zesty_macopix: ignored (reached end-of-life) artful_macopix: ignored (reached end-of-life) bionic_macopix: not-affected cosmic_macopix: not-affected devel_macopix: not-affected Patches_claws-mail: upstream_claws-mail: released (3.13.2-1ubuntu1) precise_claws-mail: ignored (reached end-of-life) precise/esm_claws-mail: DNE (precise was needed) trusty_claws-mail: not-affected (incomplete fix not applied) trusty/esm_claws-mail: DNE (trusty was not-affected [incomplete fix not applied]) vivid_claws-mail: ignored (reached end-of-life) vivid/stable-phone-overlay_claws-mail: DNE vivid/ubuntu-core_claws-mail: DNE wily_claws-mail: ignored (reached end-of-life) xenial_claws-mail: not-affected (3.13.2-1ubuntu1) yakkety_claws-mail: ignored (reached end-of-life) zesty_claws-mail: ignored (reached end-of-life) artful_claws-mail: ignored (reached end-of-life) bionic_claws-mail: not-affected (3.13.2-1ubuntu1) cosmic_claws-mail: not-affected (3.13.2-1ubuntu1) devel_claws-mail: not-affected (3.13.2-1ubuntu1)