Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Carlos Garces

#22679de 53,633
10CVSS total
Vulnerabilidades · 1
PT-2007-1220
10
2007-01-17
Pop2Owa · Pop2Owa · CVE-2006-6940
Name of the Vulnerable Software and Affected Versions: pop2owa version 1.1.3 Description: The issue is related to a buffer overflow in the ParseHeader function in clsOWA.cls, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending an e-mail message with a long header. Recommendations: For pop2owa version 1.1.3, consider applying a patch or fix to address the buffer overflow issue in the ParseHeader function. As a temporary workaround, restrict the length of headers in incoming e-mail messages to prevent exploitation.