Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2.9.115. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-11616

CVE-2018-11616 affects Tencent Foxmail 7.2.9.115. The vulnerability is a remote code execution (RCE) flaw in the handling of URI handlers, caused by improper validation of a user-supplied string before a system call. An attacker can trigger code execution by convincing a user to visit a malicious...