AL-Mail32 Attachment Name Denial of Service Vulnerability

AL-Mail32 is an email client. A security vulnerability in AL-Mail32's handling of attachment filenames allows attackers to exploit the vulnerability to crash the application...

AL-Mail32 Attachment Name Buffer Overflow Vulnerability

AL-Mail32 is an email client. AL-Mail32 suffers from a buffer overflow vulnerability in the handling of attachment filenames, which could be exploited by an attacker to crash the application or execute arbitrary code...

CVE-2015-0879

CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service application crash via a 1 CON, 2 AUX, or 3 NUL device name in the filename of an attachment...

CVE-2015-0878

Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment...

Buffer overflow

Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment...

Directory traversal

Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment...

Code injection

CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service application crash via a 1 CON, 2 AUX, or 3 NUL device name in the filename of an attachment...

CVE-2015-0878

CVE-2015-0878 affects CREAR AL-Mail32/AL-Mail32 prior to version 1.13d. A directory-traversal flaw in how attachments are processed lets an attacker craft a filename to create arbitrary files or overwrite existing ones, enabling remote impact via a crafted attachment filename. Affected software i...

CVE-2015-0879

AL-Mail32 (CREAR) vulnerability CVE-2015-0879 affects the Windows email client where a specially crafted attachment filename can trigger a DoS (application crash). Affected versions include 1.13c and earlier, with the root cause described as a flaw in processing attachment filenames. The in-scope...

CVE-2015-0879

CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service application crash via a 1 CON, 2 AUX, or 3 NUL device name in the filename of an attachment...

CVE-2015-0880

Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment...

CVE-2015-0880

AL-Mail32 (CREAR) contains a buffer overflow in the handling of attachment filenames. The CVE-2015-0880 vulnerability affects AL-Mail32 prior to version 1.13d (JVN lists 1.13c and earlier) and could let a remote attacker execute arbitrary code by supplying a specially crafted attachment filename....

AL-Mail32 vulnerable to directory traversal

Overview AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a directory traversal vulnerability due to a flaw in processing attachments. Yosuka HASEGAWA of NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#77294617: AL-Mail32 vulnerable to directory traversal

AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a directory traversal vulnerability due to a flaw in processing attachments. Impact Processing an attachment with a specially crafted file name may result in creation of an arbitrary file or an overwrite of...

JVN#55365709: AL-Mail32 vulnerable to denial-of-service (DoS)

AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a denial-of-service DoS vulnerability due to a flaw in processing attachments. Impact Processing an attachment with a specially crafted file name may cause the software to become unresponsive. Solution Upda...

JVN#93318392: AL-Mail32 vulnerable to buffer overflow

AL-Mail32 provided by CREAR Corporation is an email client for Windows. AL-Mail32 contains a buffer overflow vulnerability due to a flaw in processing attachments. Impact When an attachment with specially crafted file name is processed, arbitrary code may be executed. Solution Update the Software...

CVE-2014-7038

The Al Jazeera aka com.Al.Jazeera.net application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Al Jazeera aka com.Al.Jazeera.net application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7038

The CVE-2014-7038 entry describes a vulnerability in the Al Jazeera Android app (package com.Al.Jazeera.net) version 6.0 where SSL certificate validation is not performed. The underlying issue is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof ...

CVE-2014-7038

The Al Jazeera aka com.Al.Jazeera.net application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...