David Bienvenu

The issue allows context-dependent attackers to execute arbitrary code or cause a denial of service, specifically an application crash, via vectors involving uppercase strings. This is due to a buffer overflow in the International Components for Unicode (ICU) component.

The issue is related to multiple heap-based buffer overflows that can be triggered by remote attackers. This can be achieved through external message modes with long Content-Type headers or long RFC2047-encoded (MIME non-ASCII) headers, potentially allowing the execution of arbitrary code.