Lucene search

[email protected]CVE-2009-1516

HistoryMay 04, 2009 - 6:30 p.m.

CVE-2009-1516

2009-05-0418:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-1516

icewarpserver

buffer overflow

activex control

api.dll

nvd

security vulnerability

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.1%

JSON

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web application that accepts untrusted input for this method.

CPENameOperatorVersion
icewarp:merak_mail_servericewarp merak mail servereq9.4.1

CPE	Name	Operator	Version
icewarp:merak_mail_server	icewarp merak mail server	eq	9.4.1

References

www.securityfocus.com/bid/34739

www.exploit-db.com/exploits/8542

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.1%

JSON

Related for CVE-2009-1516

openvas1 prion1