CVE-2008-5426

Currently unrated

Key Information:

Vendor
kaspersky
Status
Kaspersky Internet Security Suite
Vendor
CVE Published:
11 December 2008

Summary

Kaspersky Internet Security Suite 2009 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.

References

http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro
x_refsource_MISC
http://securityreason.com/securityalert/4721
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/499038/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.