Lucene search

K
jvnJapan Vulnerability NotesJVN:93318392
HistoryFeb 20, 2015 - 12:00 a.m.

JVN#93318392: AL-Mail32 vulnerable to buffer overflow

2015-02-2000:00:00
Japan Vulnerability Notes
jvn.jp
12

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.031 Low

EPSS

Percentile

91.2%

AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a buffer overflow vulnerability due to a flaw in processing attachments.

Impact

When an attachment with specially crafted file name is processed, arbitrary code may be executed.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

  • AL-Mail32 Version1.13c and earlier

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.031 Low

EPSS

Percentile

91.2%

Related for JVN:93318392