> CVE-2007-1282
>
>     It was discovered that an integer overflow in text/enhanced message
>     parsing allows the execution of arbitrary code.

Isn't text/enhanced long forgotten for good? It has never been formally
registered, btw, see http://www.iana.org/assignments/media-types/text . I
suggest the corresponding handler code should be removed (if the
maintainers can persuade their upstreams), to decrease
support burden, and the applications be thus falling back to text/plain .

VKh


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to