| Package | Affected versions | Patched versions |
|---|---|---|
| pine | < 4.58 | 4.58 |
Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free