CVE:CVE-2006-2920
CNNVD:CNNVD-200606-194
Sylpheed-Claws和Sylpheed,远程攻击者通过以空格字符开始的URI来绕过URI检查功能并使其更容易执行钓鱼攻击。
solution:Upgrade sylpheed sylpheed to a higher version than 2.2.5,2.0,2.0.1,2.0.2,2.0.3,2.1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5,and avoid the version (,2.2.5],2.0,2.0.1,2.0.2,2.0.3,2.1,2.1.1,2.1.2,2.1.3,2.1.4,2.1.5; Upgrade sylpheed-claws sylpheed-claws to a higher version than 2.2.1,0.9.4,0.9.5,0.9.6,1.0.2,and avoid the version (,2.2.1],0.9.4,0.9.5,0.9.6,1.0.2