Buffer overflow

Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages...

CVE-2014-5314

Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages...

CVE-2014-5314

Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages...

CVE-2014-5314

CVE-2014-5314 maps to a buffer overflow in Cybozu Office, Cybozu Mailwise and Cybozu Dezie that allows remote authenticated users to execute arbitrary code via email messages. OpenVAS entries and JVN/CVE references confirm affected product families and versions: Cybozu Office up to 10.0.x (pre-10...

PT-2014-6398

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 9.0 through 10.0 Cybozu Mailwise versions 4.0 through 5.0 Cybozu Dezie versions 8.0 through 8.0 Description The issue allows remote authenticated users to execute arbitrary code via e-mail messages due to a buffer...

CVE-2014-5314: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages...

JVN#14691234: Multiple Cybozu products vulnerable to buffer overflow

Multiple products provided by Cybozu, Inc. contain a buffer overflow vulnerability CWE-119. Impact A remote attacker may cause a denial-of-service DoS or execute arbitrary code. Solution Update the Software Update to the latest version according to the information provided by the developer...

CVE-2013-4698

Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own mailbox...

Design/Logic Flaw

Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own mailbox...

CVE-2013-4698

Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own mailbox...

CVE-2013-4698

Cybozu Mailwise 5.0.4 and 5.0.5 are affected by an information-disclosure vulnerability where remote authenticated users can view contents of other emails by reading Subject header lines in their own mailbox. Root cause: improper handling of Subject headers enables cross-email visibility in oppor...

PT-2013-5142

Name of the Vulnerable Software and Affected Versions Cybozu Mailwise versions 5.0.4 through 5.0.5 Description The issue allows remote authenticated users to obtain sensitive e-mail content intended for different persons by reading Subject header lines within the user's own mailbox in opportunist...

CVE-2013-4698: Exposure of Sensitive Information to an Unauthorized Actor

Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own mailbox...

Cybozu Mailwise vulnerable to information disclosure

Overview Cybozu Mailwise contains a vulnerability that may display contents of another email in the subject field. Impact Contents of an email may be obtained by a user that does not have privileges to access that original email. Solution Update the Software Update to the latest version according...

JVN#21103639: Cybozu Mailwise vulnerable to information disclosure

Cybozu Mailwise contains a vulnerability that may display contents of another email in the subject field. Impact Contents of an email may be obtained by a user that does not have privileges to access that original email. Solution Update the Software Update to the latest version according to the...

CVE-2013-2305

Cross-site request forgery CSRF vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords...

PT-2013-3649

Name of the Vulnerable Software and Affected Versions Cybozu Office versions prior to 8.1.6 Cybozu Office versions 9.x prior to 9.3.0 Cybozu Dezie version prior to 8.0.7 Cybozu Mailwise version prior to 5.0.4 Description A cross-site request forgery CSRF issue allows remote attackers to hijack th...

CVE-2013-2305: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords...

JVN#06251813: Multiple Cybozu products vulnerable to cross-site request forgery

Multiple Cybozu products contain a cross-site request forgery vulnerability. Impact If a user accesses a specially crafted URL while logged in, user passwords or administrator passwords may be altered. Solution Update the Software Update to the latest version according to the information provided...

Cybozu Products Mail System Images XSS Vulnerability

Cybozu Office, Cybozu Garoon, Cybozu Dezie or Cybozu MailWise is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...