CVE-2015-0880

CREAR AL-Mail32 < 1.13 - Remote Code Execution via Long Attachment Filename

Title source: llm
STIX 2.1

Description

Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment.

References (3)

Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www.almail.com/vulnerability.html
Vendor Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000022
Vendor Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN93318392/index.html

Scores

EPSS 0.0268
EPSS Percentile 84.0%

Details

CWE
CWE-119
Status published
Products (1)
crear.ne.jp/al-mail32 < 1.13
Published Feb 20, 2015
Tracked Since Feb 18, 2026