JVN#77294617: AL-Mail32 vulnerable to directory traversal

AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a directory traversal vulnerability due to a flaw in processing attachments.

Impact

Processing an attachment with a specially crafted file name may result in creation of an arbitrary file or an overwrite of an existing file.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• AL-Mail32 Version1.13c and earlier