Description
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
References (10)
Core 10
Core References
Various Sources x_refsource_confirm
http://www.washington.edu/imap/documentation/RELNOTES.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/33275
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/32958
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/33638
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/47526
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1021485
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00846.html
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=477227
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/3490
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:146
Scores
EPSS
0.0176
EPSS Percentile
75.5%
Details
CWE
CWE-119
Status
published
Products (37)
university_of_washington/imap
2000
university_of_washington/imap
2000a
university_of_washington/imap
2000b
university_of_washington/imap
2000c
university_of_washington/imap
2001
university_of_washington/imap
2001a
university_of_washington/imap
2002
university_of_washington/imap
2002a
university_of_washington/imap
2002b
university_of_washington/imap
2002c
... and 27 more
Published
Dec 23, 2008
Tracked Since
Feb 18, 2026