CVE-2018-0684

Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier) allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via multipart/form-data format data.

Score

CVSS 3.0 9.8 Critical

Status

Modified - vultures@jpcert.or.jp

Published

2018-11-15

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Debun Imap (Neo)
• Debun Pop (Neo)
• Denbun By Neojapan Inc. Denbun Pop Version V3.3p R3.0 And Earlier (Neojapan Inc.)
• Denbun Imap Version V3.3i R3.0 And Earlier (Neojapan Inc.)

References

• http://jvn.jp/en/jp/JVN00344155/index.html
• https://www.denbun.com/en/imap/support/security/181003.html
• https://www.denbun.com/en/pop/support/security/181003.html