PT-2005-3553
CVE-2005-2665
·
Published
2005-08-23
·
Updated
2016-10-18
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Elm versions 2.5 PL5 through 2.5 PL7
Description
A stack-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via an e-mail message with a long Expires header.
Recommendations
For versions 2.5 PL5 through 2.5 PL7, update to a version that fixes the buffer overflow issue in expires.c to prevent remote code execution.
Found an issue in the description? Have something to add? Feel free to write us 👾