CVE-2015-8708

Stack-based buffer overflow in the conveuctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614...

UBUNTU-CVE-2015-8708

Stack-based buffer overflow in the conveuctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614...

Stack overflow

Multiple stack-based buffer overflows in the 1 convjistoeuc, 2 conveuctojis, and 3 convsjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion...

UBUNTU-CVE-2015-8614

Multiple stack-based buffer overflows in the 1 convjistoeuc, 2 conveuctojis, and 3 convsjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion...

CVE-2015-8708

Claws Mail 3.13.1 is affected by CVE-2015-8708 (and CVE-2015-8614) due to stack-based buffer overflows in conv_euctojis (and related conv_jistoeuc/sjistoeuc) in codeconv.c, enabling remote exploitation via a crafted email involving Japanese character set conversion. The issue arises from an incom...

CVE-2015-8708

Stack-based buffer overflow in the conveuctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614...

CVE-2015-8614

Claws Mail (GTK-based email client) is affected by a stack-based buffer overflow in codeconv.c (conv_jistoeuc, conv_euctojis, conv_sjistoeuc) that can be triggered by a crafted email containing Japanese character set conversions. Affects versions before 3.13.1; CVE-2015-8708 notes this is an inco...

CVE-2015-8708

Stack-based buffer overflow in the conveuctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614...

CVE-2015-8614

Multiple stack-based buffer overflows in the 1 convjistoeuc, 2 conveuctojis, and 3 convsjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion...

CVE-2015-8614

Multiple stack-based buffer overflows in the 1 convjistoeuc, 2 conveuctojis, and 3 convsjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion...

Android AOSP Mail Information Disclosure Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. An information disclosure vulnerability exists in the AOSP Mail component of Android, which can be exploited by a local attacker to obtain sensitive information...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Mail interface in Zimbra Collaboration Server ZCS before 8.5 allow remote attackers to hijack the authentication of arbitrary users for requests that change account preferences via a SOAP request to service/soap/BatchRequest...

Perli 2.6 Filter Bypass / Script Insertion

Document Title: =============== Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1813 Release Date: ============= 2016-04-05 Vulnerability Laboratory ID VL-ID: ====================================...

Data Leaking 'Surreptitious Sharing' Vulnerability Identified in Android API

Researchers have identified a vulnerability in an Android API used by messaging apps such as Skype and perhaps more concerning, privacy-centric apps such as Signal, and Telegram, that could lead to privilege escalation and data loss including private keys. Dominik Schürmann and Lars Wolf,...

Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability

Document Title: =============== Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1813 Release Date: ============= 2016-04-04 Vulnerability Laboratory ID VL-ID: ====================================...

Mail Boy Adventure - Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mail Boy Adventure published at the 'play' market has multiple vulnerabilities...

K-9 Mail - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application K-9 Mail published at the 'play' market has multiple vulnerabilities...

1&1 Mail - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 1&1 Mail published at the 'play' market has multiple vulnerabilities...

Telekom Mail - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Telekom Mail published at the 'play' market has multiple vulnerabilities...

GMX Mail - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application GMX Mail published at the 'play' market has multiple vulnerabilities...