EUVD-2000-0917

Malware in sbrugna...

EUVD-2005-4439

Malware in sbrugna...

EUVD-2005-4440

Malware in sbrugna...

EUVD-2000-0918

Malware in sbrugna...

EUVD-2017-17986

Malware in sbrugna...

Pegasus Mail Security Bypass Vulnerability

Pegasus Mail a.k.a. Pmail is an e-mail client available for the Microsoft Windows operating system. A security vulnerability exists in the winpm-32.exe file in Pegasus Mail version 4.72 build 572. An attacker can exploit this vulnerability to execute code with the help of a specially crafted...

CVE-2017-9046

winpm-32.exe in Pegasus Mail aka Pmail v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers th...

CVE-2017-9046

winpm-32.exe in Pegasus Mail aka Pmail v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers th...

Code injection

winpm-32.exe in Pegasus Mail aka Pmail v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers th...

CVE-2017-9046

winpm-32.exe in Pegasus Mail aka Pmail v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers th...

CVE-2017-9046

CVE-2017-9046 affects Pegasus Mail (winpm-32.exe) v4.72 build 572. A DLL load flaw in ssgp.dll on the desktop enables remote via a crafted DLL to execute code when a user clicks a mailto: link from a remote page. Exploitation relies on locally installed ssgp.dll; DllMain is the execution point. M...

CVE-2017-9046: Improper Input Validation

winpm-32.exe in Pegasus Mail aka Pmail v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers th...

PT-2017-18669

Name of the Vulnerable Software and Affected Versions Pegasus Mail version 4.72 build 572 Description The issue allows code execution via a crafted ssgp.dll file that must be installed locally. For instance, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then...

Pegasus winpm-32.exe v4.72 Mailto: Link Remote Code Execution Vulnerability

Exploit for windows platform in category remote exploits + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PEGASUS-MAILTO-LINK-REMOTE-CODE-EXECUTION.txt + ISR: APPARITIONSEC Vendor: ============= www.pmail.com Product:...

Pegasus 4.72 Build 572 Remote Code Execution

Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PEGASUS-MAILTO-LINK-REMOTE-CODE-EXECUTION.txt + ISR: APPARITIONSEC Vendor: ============= www.pmail.com Product: ===================== Pegasus "winpm-32.exe" v4.72 build 572...

Pegasus Mail 4.0 1 Message Header Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5302/info Pegasus Mail is an email client for Microsoft Windows and DOS based systems. A buffer overflow vulnerability has been reported in some versions of Pegasus Mail. Reportedly, Pegasus is vulnerable to a buffer...

Pegasus Mail Version Detection

This script retrieves the installed version of Pegasus Mail. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pegasus Mail POP3 Response Buffer Overflow Vulnerability

This host is running Pegasus Mail which is prone to stack-based Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbpegasusmailpop3bofvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Pegasus Mail POP3 Response Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 2009...

Pegasus Mail Version Detection

This script retrieves the installed version of Pegasus Mail and saves the result in KB. OpenVAS Vulnerability Test $Id: gbpegasusmaildetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Pegasus Mail Version Detection Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Pegasus Mail POP3 Response Buffer Overflow Vulnerability

Pegasus Mail is prone to stack-based Buffer Overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...