NetSight
high7.5

CVE-2004-0224

Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote …

Impact

Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."

Affected products

VendorProductAffected versions
Double Precision IncorporatedCourier Mta
Versions 0.43, 0.43.1, 0.43.2, 0.44, 0.44.2
Double Precision IncorporatedSqwebmail
Versions 3.5.2, 3.5.3, 3.6.1, 3.6.2, 3.6_.0
Inter7Courier-Imap
Versions 1.6, 1.7, 2.0.0, 2.1, 2.1.1, 2.1.2
GentooLinux
Version 1.4

References