AL-Mail32 vulnerable to buffer overflow

Overview AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a buffer overflow vulnerability due to a flaw in processing attachments. Impact When an attachment with specially crafted file name is processed, arbitrary code may be executed. Solution Update the...

AL-Mail32 vulnerable to denial-of-service (DoS)

Overview AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a denial-of-service DoS vulnerability due to a flaw in processing attachments. Yosuka HASEGAWA of NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer unde...

JVN#93318392: AL-Mail32 vulnerable to buffer overflow

AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a buffer overflow vulnerability due to a flaw in processing attachments. Impact When an attachment with specially crafted file name is processed, arbitrary code may be executed. Solution Update the Software...

JVN#77294617: AL-Mail32 vulnerable to directory traversal

AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a directory traversal vulnerability due to a flaw in processing attachments. Impact Processing an attachment with a specially crafted file name may result in creation of an arbitrary file or an overwrite of...

[SECURITY] Fedora 19 Update: claws-mail-3.11.1-2.fc19

Claws Mail is an email client and news reader, based on GTK+, featuring quick response, graceful and sophisticated interface, easy configuration, intuitive operation, abundant features, and extensibility...

[SECURITY] Fedora 21 Update: claws-mail-3.11.1-2.fc21

Claws Mail is an email client and news reader, based on GTK+, featuring quick response, graceful and sophisticated interface, easy configuration, intuitive operation, abundant features, and extensibility...

[SECURITY] Fedora 20 Update: claws-mail-3.11.1-2.fc20

Claws Mail is an email client and news reader, based on GTK+, featuring quick response, graceful and sophisticated interface, easy configuration, intuitive operation, abundant features, and extensibility...

[SECURITY] Fedora 20 Update: claws-mail-3.10.1-1.fc20

Claws Mail is an email client and news reader, based on GTK+, featuring quick response, graceful and sophisticated interface, easy configuration, intuitive operation, abundant features, and extensibility...

Rit Research Labs The Bat! 1.53 MS DoS Device Name Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4187/info The Bat! is an e-mail client for Microsoft Windows operating systems. A problem occurs with The Bat! when it is configured to save attachments seperately from the body of a message. It is possible to include a...

Microsoft Outlook 97/98/2000/4/5 Address Book Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that are replied to by...

Qualcomm Eudora 4.2/4.3 Warning Message Circumvention Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1157/info A malicious email sender can circumvent warning messages that would normally display when a user attempts to view executable attachments in Eudora 4.2/4.3. Eudora does not prompt a user with the warning message ...

eM Client e-mail client 5.0.18025.0 - Stored XSS vulnerability

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Date: 22-08-2013 Product: eM Client for Windows Version: 5.0.18025.0 previous versions and other platforms may be vulnerable Vendor Site: http://www.emclient.com/ Software Download:...

GNOME Evolution 2.2.3/2.3.x Inline XML File Attachment Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16408/info GNOME Evolution email client is prone to a denial-of-service vulnerability when processing messages containing inline XML file attachments with excessively long strings. perl -e 'printf Ax40000'...

Rit Research Labs "The Bat!" 1.x Missing Linefeeds DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2636/info The Bat! is an MUA for Windows by Rit Research Labs. The Bat! is vulnerable to a remote denial of service attack. Email messages in which carriage return CR characters are not followed by a linefeed LF can cause...

David Harris Pegasus Mail 3.12 File Forwarding Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1738/info It is possible for a malicious website operator to obtain copies of known files on a remote system if a website visitor is running Pegasus Mail client. If the following code were to be inserted into a HTML...

Ultrafunk Popcorn 1.20 Multiple Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/5212/info Ultrafunk Popcorn email client is designed for Microsoft Windows systems and is no longer being maintained. It has been reported that Popcorn email client will stop responding when attempting to open malformed...

MS Outlook Express 5 Javascript Email Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/962/info Microsoft Outlook Express 5, and possibly other email clients that parse HTML messages, can be made to run Active Scripting that will read any new messages that arrive after the hostile code has been run. Example...

Elm < 2.5.8 (Expires Header) Remote Buffer Overflow Exploit

No description provided by source. / Exploit code for the bug posted by Ulf Harnhammar metaurtelia.com http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0688.html Probably you will need to change SYSLOC and STRLOC to work on your box / include stdio.h include stdlib.h include string.h...

Xcmail 0.99.6 Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/311/info XCmail is an X11 mail client for linux. Arthur [email protected] discovered an exploitable buffer overflow vulnerability in xcmail. The bug appears when replying to a message with a long subject line, and...

Novell NetMail 3.x Automatic Script Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14171/info Novell NetMail email client is prone to an input validation vulnerability. Reports indicate that HTML and JavaScript attached to received email messages is executed automatically, when the email message is...