Exploit Pegasus Mail 4.0 1 - Message Header Buffer Overflow

[Exploiter]

EDB-ID

21648

Проверка EDB

1. Пройдено

Автор

AURIEMMA LUIGI

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

cve-2002-1075

Дата публикации

2002-07-24

source: https://www.securityfocus.com/bid/5302/info

Pegasus Mail is an email client for Microsoft Windows and DOS based systems. A buffer overflow vulnerability has been reported in some versions of Pegasus Mail.

Reportedly, Pegasus is vulnerable to a buffer overflow condition when processing some long message headers. If either the 'To:' or 'From:' message headers are longer than approximately 259 characters, Pegasus may crash when displaying the message.

This issue has been reported in Pegasus Mail 4.01. Earlier versions may share this vulnerability, this has not however been confirmed.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21648.zip