Информационная безопасность
[RU] switch to English


Дополнительная информация

  Повреждение памяти при разборе HTML в Gnome / Evolution

From:jplopezy_(at)_gmail.com <jplopezy_(at)_gmail.com>
Date:26 июня 2008 г.
Subject:Evolution Vulnerability


Application: Evolution 2.22.2
OS: Linux - Ubuntu 8.04
------------------------------------------------------
1 - Description
2 - Vulnerability
3 - POC/EXPLOIT


------------------------------------------------------
Description

Evolution is an email client that is built with ubuntu.


------------------------------------------------------
Vulnerability

       
The vulnerability works when mail is sent and specially armed with html code, this causes the client to break.

Analyzing with a debugger, you can see the failure with the following function.


0xb7a219d7 in html_engine_get_view_width () from /usr/lib/libgtkhtml-3.14.so.19


------------------------------------------------------
POC/EXPLOIT

       
The proof of concept can be done locally,
when you save the following code in a html file and then load it into an e-mail from the new option "insert" and "html
file",
as that could verify the client is broken.

<IFRAME SRC="A"></IFRAME>
<FRAMESET><FRAME SRC="A"></FRAMESET>

------------------------------------------------------
Juan Pablo Lopez Yacubian

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород