CVE-2006-6024: грешка в паметта

Описание

Оригинално описание

Multiple buffer overflows in Eudora Worldmail, possibly Worldmail 3 version 6.1.22.0, have unknown impact and attack vectors, as demonstrated by the (1) "Eudora WorldMail stack overflow" and (2) "Eudora WorldMail heap overflow" modules in VulnDisco Pack. NOTE: Some of these details are obtained from third party information. As of 20061118, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

Засегнати продукти

• n/a n/a: n/a

Вид слабост

• CWE-120 Копиране в буфер без проверка на размера на входа

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2006-6024
• https://nvd.nist.gov/vuln/detail/CVE-2006-6024
• http://www.securityfocus.com/bid/21095
• http://web.archive.org/web/20060502082657/http://www.gleg.net/vulndisco_pack_standard.shtml
• http://secunia.com/advisories/22832