CVE-2004-0224

Courier MTA < 0.45 - Remote Code Execution via Unicode Character Handling

Title source: llm
STIX 2.1

Description

Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15434
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/11087/
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/9845

Scores

EPSS 0.0369
EPSS Percentile 88.1%

Details

Status published
Products (19)
double_precision_incorporated/courier_mta 0.43
double_precision_incorporated/courier_mta 0.43.1
double_precision_incorporated/courier_mta 0.43.2
double_precision_incorporated/courier_mta 0.44
double_precision_incorporated/courier_mta 0.44.2
double_precision_incorporated/sqwebmail 3.5.2
double_precision_incorporated/sqwebmail 3.5.3
double_precision_incorporated/sqwebmail 3.6.1
double_precision_incorporated/sqwebmail 3.6.2
double_precision_incorporated/sqwebmail 3.6_.0
... and 9 more
Published Apr 15, 2004
Tracked Since Feb 18, 2026