CVE-2015-0879 CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application crash) via a (1) CON, (2) AUX, or (3) NUL device name in the filename of an attachment.
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application crash) via a (1) CON, (2) AUX, or (3) NUL device name in the filename of an attachment.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| almail al-mail32 | <= 1.13c | No fix listed |
References
- JVN#55365709 third-party-advisory vendor-advisory
- JVNDB-2015-000021 third-party-advisory vendor-advisory
- www.almail.com patch vendor-advisory