| Package | Affected versions | Patched versions |
|---|---|---|
| imap | = 2000= 2000a= 2000b= 2000c= 2001= 2001a= 2002= 2002a= 2002b= 2002c= 2002d= 2002e= 2002f= 2004= 2004a= 2004b= 2004c= 2004d= 2004e= 2004f= 2004g= 2006= 2006a= 2006b= 2006c= 2006d= 2006e= 2006f= 2006g= 2006h= 2006i= 2006j= 2006k= 2007= 2007a= 2007b≤ 2007d |
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free