CVE-2009-1516

HIGH 7.5CVE-2009-1516 · Published 04/05/2009 · updated 16/06/2026

In short

CVE-2009-1516 is a HIGH (CVSS 7.5) vulnerability affecting merak mail server (icewarp).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
merak mail server icewarp	`= 9.4.1`	No fix yet

Description

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web application that accepts untrusted input for this method.

References

securityfocus.com/bid/34739 · Exploit
exploit-db.com/exploits/8542

More vulnerabilities in merak mail server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free