desktop-packages team mailing list archive

[Rolf Leggewie <526203@xxxxxxxxxxxxxxxxxx>]

does this ever occur in trusty or later?

** Changed in: thunderbird (Ubuntu)
       Status: New => Incomplete

** Changed in: thunderbird (Ubuntu)
     Assignee: (unassigned) => Rolf Leggewie (r0lf)

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to thunderbird in Ubuntu.
https://bugs.launchpad.net/bugs/526203

Title:
  a specially crafted message can cause thunderbird message control to
  be hidden

Status in “thunderbird” package in Ubuntu:
  Incomplete

Bug description:
  Binary package hint: thunderbird

  
  1)

  eve:[~]% lsb_release -rd
  Description:	Ubuntu lucid (development branch)
  Release:	10.04

  2)

  eve:[~]% apt-cache policy thunderbird
  thunderbird:
    Installed: 3.0.1+nobinonly-0ubuntu1
    Candidate: 3.0.1+nobinonly-0ubuntu1
    Version table:
   *** 3.0.1+nobinonly-0ubuntu1 0
          500 http://uk.archive.ubuntu.com lucid/main Packages
          100 /var/lib/dpkg/status
  eve:[~]% 

  3)

  A message to put displayed with the normal, delete, archive, junk,
  etc. buttons.

  4)

  The buttons were not displayed.

  Please find attached two screenshots illustrating the problem.

  5)

  I have flagged this a security bug because, if you can visually exceed
  the widget buffer it might be possible to cause a buffer overflow that
  is more damaging (you can still process the message just with keyboard
  shortcuts)

  ProblemType: Bug
  Architecture: i386
  Date: Tue Feb 23 03:49:40 2010
  DistroRelease: Ubuntu 10.04
  Package: thunderbird 3.0.1+nobinonly-0ubuntu1
  ProcEnviron:
   LANGUAGE=en_AU.utf8
   PATH=(custom, user)
   LANG=en_AU.utf8
   SHELL=/usr/bin/zsh
  ProcVersionSignature: Ubuntu 2.6.32-14.20-generic
  SourcePackage: thunderbird
  Uname: Linux 2.6.32-14-generic i686

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/526203/+subscriptions