PT-2006-4901 · Eremove · Eremove

Dedi Dwianto · Publicado 2006-08-10 · Atualizado 2018-10-17 · CVE-2006-4057

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Eremove version 1.4

Description The issue is related to a buffer overflow in the preview create function, which can be triggered by a large email attachment. This can cause a denial of service, resulting in an application crash, and potentially allow the execution of arbitrary code.

Recommendations For Eremove version 1.4, consider disabling the preview create function in gui.cpp to prevent potential exploitation until a fix is available. Restrict the handling of large email attachments to minimize the risk of a denial of service or code execution.

Correção

Identificadores relacionados

CVE-2006-4057

Produtos afetados

Eremove

Referências · 6

• http://securityreason.com/securityalert/1368 · Nota
• http://securityfocus.com/archive/1/442220/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4057 · Nota de Segurança
• http://securityfocus.com/bid/19352 · Nota
• http://securitytracker.com/id?1016640 · Nota
• http://advisories.echo.or.id/adv/adv42-theday-2006.txt · Aviso do Fabricante