CVE-1999-0673

ALMail32 - Buffer Overflow via From or To Header

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-0673. PoCs published by UNYUN.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in ALMail32 POP3 client (CVE-1999-0673) by crafting a malicious email with an abnormally long FROM or TO header field. The exploit code includes shellcode to execute arbitrary commands via msvcrt.dll.system.

Description

Buffer overflow in ALMail32 POP3 client via From: or To: headers.

Exploits (1)

exploitdb WORKING POC VERIFIED

by UNYUN · cremotewindows

https://www.exploit-db.com/exploits/19450

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in ALMail32 POP3 client (CVE-1999-0673) by crafting a malicious email with an abnormally long FROM or TO header field. The exploit code includes shellcode to execute arbitrary commands via msvcrt.dll.system.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: ALMail32 Version 1.10

No auth needed

Prerequisites: Access to the target's mail spool directory · Target must use ALMail32 Version 1.10

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/574

Scores

EPSS 0.0159

EPSS Percentile 72.5%

Details

Status published

Products (1)

crear/almail32 1.10

Published Aug 08, 1999

Tracked Since Feb 18, 2026