PT-2024-4066 · Mime4J+1 · Mime4J+1

Benoit Tellier · Published 2024-02-27 · Updated 2025-05-06 · CVE-2024-21742

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions: MIME4J library (affected versions not specified)

Description: The issue is related to improper input validation in the MIME4J library, which can be exploited by an attacker to add unintended headers to MIME messages. This can occur when using the MIME4J DOM for composing messages. The exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

RCE

Weakness Enumeration

CWE-74

CWE-20

Related Identifiers

BDU:2024-04513

CVE-2024-21742

GHSA-JW7R-RXFF-GV24

OESA-2024-1333

OESA-2024-1475

OESA-2024-1476

OESA-2024-1477

OESA-2024-1478

OESA-2024-1479

Affected Products

Debian

Mime4J

References · 35

• https://osv.dev/vulnerability/DEBIAN-CVE-2024-21742 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-21742 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-21742 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-21742 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-21742 · Security Note
• https://osv.dev/vulnerability/OESA-2024-1476 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1475 · Vendor Advisory
• https://lists.apache.org/thread/nrqzg93219wdj056pqfszsd33dc54kfy · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jw7r-rxff-gv24 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1333 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-04513 · Security Note
• https://ubuntu.com/security/CVE-2024-21742 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1479 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1477 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1478 · Vendor Advisory