Borland Caliber 11.0 Quiksoft EasyMail SMTP Object Buffer Overflows

2013.04.29

Credit: rgod

Risk: High

Local: Yes

Remote: No

CVE: N/A

CWE: CWE-119

Borland Caliber 11.0 Quiksoft EasyMail SMTP Object Buffer Overflows

ActiveX settings:
Binary path: C:\Program Files (x86)\Borland\CaliberRM\emsmtp.dll
Version: 5.0.0.11
ProgID: EasyMail.SMTP.5
CLSID: {4610E7BF-710F-11D3-813D-00C04F6B92D0}
Safe for Scripting: True
Safe for Initialization: True


SubmitToExpress and AddAttachment methods are vulnerable see CVE-2007-4607
and CVE-2009-4663

//rgod

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Borland Caliber 11.0 Quiksoft EasyMail SMTP Object Buffer Overflows

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.