CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application crash) via a (1) CON, (2) AUX, or (3) NUL device name in the filename of an attachment.
References
| Link | Resource |
|---|---|
| http://jvn.jp/en/jp/JVN55365709/index.html | Vendor Advisory |
| http://jvndb.jvn.jp/jvndb/JVNDB-2015-000021 | Vendor Advisory |
| http://www.almail.com/vulnerability.html | Patch Vendor Advisory |
| http://jvn.jp/en/jp/JVN55365709/index.html | Vendor Advisory |
| http://jvndb.jvn.jp/jvndb/JVNDB-2015-000021 | Vendor Advisory |
| http://www.almail.com/vulnerability.html | Patch Vendor Advisory |
Configurations
History
21 Nov 2024, 02:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://jvn.jp/en/jp/JVN55365709/index.html - Vendor Advisory | |
| References | () http://jvndb.jvn.jp/jvndb/JVNDB-2015-000021 - Vendor Advisory | |
| References | () http://www.almail.com/vulnerability.html - Patch, Vendor Advisory |
Information
Published : 2015-02-20 11:59
Updated : 2025-04-12 10:46
NVD link : CVE-2015-0879
Mitre link : CVE-2015-0879
CVE.ORG link : CVE-2015-0879
JSON object : View
Products Affected
almail
- al-mail32
CWE
CWE-20
Improper Input Validation
