NetSight
high7.5Public exploit code

CVE-2005-2665

Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-ma…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.

Affected products

VendorProductAffected versions
Elm Development GroupElm
Versions 2.5_pl5, 2.5_pl6, 2.5_pl7

References