medium5.8
CVE-2015-0878
Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment.
Impact
Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Almail | Al-Mail32 | through 1.13c |