NVD

Id
28707  
Name
CVE-2015-8614  
Description
Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-11  
Modified Date
2016-12-02  
Seq
2015-8614  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
150994 28707 CVE-2015-8614 http://git.claws-mail.org/?p=claws.git;a=commit;h=d390fa07f5548f3173dd9cc13b233db5ce934c82  View
150995 28707 CVE-2015-8614 openSUSE-SU-2016:0002  View
150996 28707 CVE-2015-8614 http://www.claws-mail.org/news.php  View
150997 28707 CVE-2015-8614 DSA-3452  View
150998 28707 CVE-2015-8614 [oss-security] 20151221 mail-client/claws-mail-3.13.1: Stack Overflow - CVE needed?  View
150999 28707 CVE-2015-8614 [oss-security] 20151221 Re: mail-client/claws-mail-3.13.1: Stack Overflow - CVE needed?  View
151000 28707 CVE-2015-8614 http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3557  View
151001 28707 CVE-2015-8614 GLSA-201606-11  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11747 JVNDB-2015-007067 Claws Mail の codeconv.c におけるスタックベースのバッファオーバーフローの脆弱性 Claws Mail の codeconv.c の (1) conv_jistoeuc、(2) conv_euctojis、および (3) conv_sjistoeuc 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-8614 85839 CVE-2015-8614 28707 7.5 7.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007067.html 2015-11-05 2016-04-21 View