CVE-2015-8708
HIGHClaws Mail 3.13.1 - Stack-Based Buffer Overflow in Japanese Character Set Conversion
Title source: llmDescription
Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614.
References (2)
Core 2
Core References
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201606-11
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/12/31/1
Scores
CVSS v3
7.3
EPSS
0.0154
EPSS Percentile
71.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-119
Status
published
Products (1)
claws-mail/claws-mail
3.13.1
Published
Apr 11, 2016
Tracked Since
Feb 18, 2026