======================================================================== = EasyMail Objects v6.5 Connect Method Stack Overflow = = Vendor Website: = http://www.quiksoft.com = = Affected Version: = All versions of EasyMail Objects prior to v6.5 = = Public disclosure on February 16th, 2007. ======================================================================== == Overview == During a security review of the safe-for-scripting EasyMail objects, a stack overflow was discovered in the connect method of EasyMail IMAP4 (Object ClassID {703B353E-FA2E-4072-8DDF-F70AAC7E527E}). This advisory is also available online at http://www.security-assessment.com/files/advisories/easymail_advisory.pd f == Exploitation == When the object is initialized and the Connect method is called, a stack overflow is possible when a large (500+ characters) host name is specified. Once arbitrary data has been written to the stack, it is possible to overflow the structured exception handler and gain command execution. == Solutions == Security-Assessment.com has been in contact with Quiksoft and a new version of the software has been released to address the discovered vulnerability. Security-Assessment.com urges EasyMail users to upgrade to the latest version which is available at http://www.quiksoft.com/download/emsetup.exe. == Credit == Discovered and advised to Quiksoft February, 2007 by Paul Craig of Security-Assessment.com == About Security-Assessment.com == Security-Assessment.com is Australasia's leading team of Information Security consultants specialising in providing high quality Information Security services to clients throughout the Asia Pacific region. Our clients include some of the largest globally recognised companies in areas such as finance, telecommunications, broadcasting, legal and government. Our aim is to provide the very best independent advice and a high level of technical expertise while creating long and lasting professional relationships with our clients. Security-Assessment.com is committed to security research and development, and its team continues to identify and responsibly publish vulnerabilities in public and private software vendor's products. Members of the Security-Assessment.com R&D team are globally recognised through their release of whitepapers and presentations related to new security research. Security-Assessment.com is an Endorsed Commonwealth Government of Australia supplier and sits on the Australian Government Attorney-General's Department Critical Infrastructure Project panel. We are certified by both Visa and MasterCard under their Payment Card Industry Data Security Standard Programs.