CVE-2006-6940 Buffer overflow in the ParseHeader function in clsOWA.cls in POP3/SMTP to OWA (pop2owa) 1.1.3 allows remote attackers to execute arbitrary code via a long header in an e-mail message.
HighCVSS 10.0
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the ParseHeader function in clsOWA.cls in POP3/SMTP to OWA (pop2owa) 1.1.3 allows remote attackers to execute arbitrary code via a long header in an e-mail message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| owa | = 1.1.3 | No fix listed |
References
- sourceforge.net patch
- sourceforge.net vendor-advisory
- ADV-2007-0160 vdb-entry