• info
• discussion
• exploit
• solution
• references

Gnome GMIME_UUENCODE_LEN() Macro Buffer Overflow Vulnerability

Solution:
The vendor has released updates. Please see the references for details.


Debian Linux 5.0 hppa

• Debian libgmime-2.0-2-dev_2.2.22-2+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -dev_2.2.22-2+lenny2_hppa.deb


• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime-2.0-2a_2.2.22-2+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 a_2.2.22-2+lenny2_hppa.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 ia-64

• Debian libgmime-2.0-2-dev_2.2.22-2+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -dev_2.2.22-2+lenny2_ia64.deb


• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime-2.0-2a_2.2.22-2+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 a_2.2.22-2+lenny2_ia64.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 m68k

• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 arm

• Debian libgmime-2.0-2-dev_2.2.22-2+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -dev_2.2.22-2+lenny2_arm.deb


• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime-2.0-2a_2.2.22-2+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 a_2.2.22-2+lenny2_arm.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 armel

• Debian libgmime-2.0-2-dev_2.2.22-2+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -dev_2.2.22-2+lenny2_armel.deb


• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime-2.0-2a_2.2.22-2+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 a_2.2.22-2+lenny2_armel.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0

• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 alpha

• Debian libgmime-2.0-2-dev_2.2.22-2+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -dev_2.2.22-2+lenny2_alpha.deb


• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime-2.0-2a_2.2.22-2+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 a_2.2.22-2+lenny2_alpha.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 amd64

• Debian libgmime-2.0-2-dev_2.2.22-2+lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -dev_2.2.22-2+lenny2_amd64.deb


• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime-2.0-2a_2.2.22-2+lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 a_2.2.22-2+lenny2_amd64.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 ia-32

• Debian libgmime-2.0-2-dev_2.2.22-2+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -dev_2.2.22-2+lenny2_i386.deb


• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime-2.0-2a_2.2.22-2+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 a_2.2.22-2+lenny2_i386.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 mips

• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 s/390

• Debian libgmime-2.0-2-dev_2.2.22-2+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -dev_2.2.22-2+lenny2_s390.deb


• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime-2.0-2a_2.2.22-2+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 a_2.2.22-2+lenny2_s390.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 mipsel

• Debian libgmime-2.0-2-dev_2.2.22-2+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -dev_2.2.22-2+lenny2_mipsel.deb


• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime-2.0-2a_2.2.22-2+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 a_2.2.22-2+lenny2_mipsel.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 powerpc

• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

Debian Linux 5.0 sparc

• Debian libgmime-2.0-2-dev_2.2.22-2+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -dev_2.2.22-2+lenny2_sparc.deb


• Debian libgmime-2.0-2-doc_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 -doc_2.2.22-2+lenny2_all.deb


• Debian libgmime-2.0-2a_2.2.22-2+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime-2.0-2 a_2.2.22-2+lenny2_sparc.deb


• Debian libgmime2.2-cil_2.2.22-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/g/gmime2.2/libgmime2.2-ci l_2.2.22-2+lenny2_all.deb

GNOME GMime 2.4.14

• GNOME gmime-2.4.15.tar.gz
  http://ftp.acc.umu.se/pub/GNOME/sources/gmime/2.4/gmime-2.4.15.tar.gz