CVE-2005-4267 Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2)...
HighCVSS 7.5
EPSS 66.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7) SELECT, and (8) COPY commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm worldmail | = 3.0 | No fix listed |
References
- 20051220 [ACSSEC-2005-11-27-0x1] Eudora Qualcomm WorldMail 3.0 IMAP4 Servi ce 6.1.19.0 exploit mailing-list vendor-advisory
- 17640 third-party-advisory vendor-advisory
- 277 third-party-advisory
- 1015391 vdb-entry
- 20051220 Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability third-party-advisory vendor-advisory
- 15980 exploit vdb-entry
- ADV-2005-3005 vdb-entry vendor-advisory