Lucene search

K
kasperskyKaspersky LabKLA10148
HistoryMar 03, 2010 - 12:00 a.m.

KLA10148 ACE vulnerability in Quiksoft Easymail Objects

2010-03-0300:00:00
Kaspersky Lab
threats.kaspersky.com
28

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.162 Low

EPSS

Percentile

95.9%

Detect date:

03/03/2010

Severity:

Critical

Description:

A buffer overflow was found in QuikSoft EasyMail Objects. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to the connection method.

Affected products:

QuickSoft EasyMail Objects versions 6.4 and earlier

Solution:

Update to latest version

Impacts:

ACE

Related products:

EasyMail IMAP4 Object ActiveX Control

CVE-IDS:

CVE-2007-10297.6Critical

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.162 Low

EPSS

Percentile

95.9%