Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pine rfc2231_get_param()远程整数溢出漏洞
Vulnerability Description
Pine是一款开放源代码的EMAIL客户端。 Pine包含的rfc2231_get_param()函数存在整数溢出问题，远程攻击者可以利用这个漏洞构建恶意邮件，诱使用户访问，以用户进程权限在系统上执行任意指令。 问题存在于strings.c文件中的rfc2231_get_param()函数，其中声明了64字节大小的字符数组： #define RFC2231_MAX 64 ... char *pieces[RFC2231_MAX]; and indexed by the signed integer var
CVSS Information
N/A
Vulnerability Type
N/A