CVE-2015-0879
CREAR AL-Mail32 < 1.13c - Denial of Service via Device Name Attachment
Title source: llmDescription
CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application crash) via a (1) CON, (2) AUX, or (3) NUL device name in the filename of an attachment.
References (3)
Core 3
Core References
Vendor Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN55365709/index.html
Patch, Vendor Advisory x_refsource_confirm
http://www.almail.com/vulnerability.html
Vendor Advisory third-party-advisory
x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000021
Scores
EPSS
0.0132
EPSS Percentile
67.5%
Details
CWE
CWE-20
Status
published
Products (1)
almail/al-mail32
< 1.13c
Published
Feb 20, 2015
Tracked Since
Feb 18, 2026