EUVD-2015-0888

Malware in sbrugna...

EUVD-2015-0890

Malware in sbrugna...

CVE-2015-0878

Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment...

Directory traversal

Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment...

Buffer overflow

Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment...

CVE-2015-0878

CVE-2015-0878 affects CREAR AL-Mail32/AL-Mail32 prior to version 1.13d. A directory-traversal flaw in how attachments are processed lets an attacker craft a filename to create arbitrary files or overwrite existing ones, enabling remote impact via a crafted attachment filename. Affected software i...

CVE-2015-0880

Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment...

CVE-2015-0880

AL-Mail32 (CREAR) contains a buffer overflow in the handling of attachment filenames. The CVE-2015-0880 vulnerability affects AL-Mail32 prior to version 1.13d (JVN lists 1.13c and earlier) and could let a remote attacker execute arbitrary code by supplying a specially crafted attachment filename....

CVE-2015-0880: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment...

CVE-2015-0879: Improper Input Validation

CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service application crash via a 1 CON, 2 AUX, or 3 NUL device name in the filename of an attachment...

CVE-2015-0878: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment...