CVE-2010-0562: Buffer Overflow
The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an SSL X.509 certificate containing non-printable characters with the high bit set, which triggers a heap-based buffer overflow during escaping.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0562?
CVE-2010-0562 is considered a high severity vulnerability due to its potential for denial of service and arbitrary code execution.
How do I fix CVE-2010-0562?
To fix CVE-2010-0562, upgrade to a later version of Fetchmail that addresses this vulnerability.
Which versions of Fetchmail are affected by CVE-2010-0562?
CVE-2010-0562 affects Fetchmail versions 6.3.11, 6.3.12, and 6.3.13.
Can CVE-2010-0562 lead to arbitrary code execution?
Yes, CVE-2010-0562 may allow remote attackers to execute arbitrary code by exploiting the vulnerability.
What platforms are impacted by CVE-2010-0562?
CVE-2010-0562 affects platforms where the char data type is signed and Fetchmail is running in verbose mode.