[Full-disclosure] Mercury/32 4.01b

Attached is a remote exploit disarmed PoC for Mercury/32 4.01b IMAPD. The vulnerability is located in the call:- 034646AE call sub346ECD9 which is passes as third argument the number of bytes remaining in a stack buffer in order to construct the complete command from the continuation data. Howeve...