RSS   Vulnerabilities for 'Foxmail'   RSS

2018-08-30
 
CVE-2018-11616

CWE-78
 

 
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2.9.115. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5543.

 
2009-01-05
 
CVE-2008-5839

CWE-119
 

 
Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A element.

 
2004-12-31
 
CVE-2004-2719

 

 
Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitrary code via a mail message with a long From field, a different issue than CVE-2005-0339.

 

 >>> Vendor: Foxmail 2 Products
Foxmail
Foxmail email server


Copyright 2024, cxsecurity.com

 

Back to Top