355 matches found
CVE-2004-0668: Undefined Security Weakness
Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service server crash via a large e-mail message, as demonstrated using a large image attachment...
CVE-2004-0584: Undefined Security Weakness
Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly validate input, which allows remote attackers to execute arbitrary script as other users via script or HTML in an e-mail message, possibly triggering a cross-site scripting XSS vulnerability...
Fetchmail DoS
a specially crafted email message can cause fetchmail to crash...
fetchmail -- denial-of-service vulnerability
Dave Jones discovered a denial-of-service vulnerability in fetchmail. An email message containing a very long line could cause fetchmail to segfault due to missing NUL termination in transact.c. Eric Raymond decided not to mention this issue in the release notes for fetchmail 6.2.5, but it was...
CVE-2003-0336: Undefined Security Weakness
Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return CR character in a spoofed "Attachment Converted:" string, which is not properly handled by Eudora...
CVE-2002-0411
Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line...
CVE-2002-0342: Undefined Security Weakness
Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service crash via an email message whose body is approximately 55 K long...
CVE-2001-0945
Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line...
CVE-2001-0996
POP3Lite before 0.2.4 does not properly quote a . dot in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to...
CVE-2001-0945: Undefined Security Weakness
Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line...
CVE-2001-0996
POP3Lite before 0.2.4 does not properly quote a . dot in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to...
Rit Research Labs The Bat! 1.x - Missing Linefeeds Denial of Service
Rit Research Labs The Bat! 1.x - Missing Linefeeds Denial of Service source: https://www.securityfocus.com/bid/2636/info "The Bat!" is an MUA for Windows by Rit Research Labs. "The Bat!" is vulnerable to a remote denial of service attack. Email messages in which carriage return CR characters are...
CVE-2000-0931
Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data...
javascript.hotmail.txt
Georgi Guninski security advisory 3, 2000 Yet another Hotmail security hole - injecting JavaScript in IE using "@import urljavascript:..." Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact...
