CVE-2015-8614: Buffer Overflow
Published Apr 11, 2016
·Updated
Multiple stack-based buffer overflows in the (1) convjistoeuc, (2) conveuctojis, and (3) convsjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion.
Affected Software
4 affected components
claws-mail claws-mail<=3.13.0
openSUSE Leap=42.1
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
Remediation
Patch Available
Event History
Apr 11, 2016
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8614?
CVE-2015-8614 has a high severity rating due to the possibility of remote code execution through crafted emails.
2
How do I fix CVE-2015-8614?
To fix CVE-2015-8614, upgrade Claws Mail to version 3.13.1 or later.
3
What versions of Claws Mail are affected by CVE-2015-8614?
CVE-2015-8614 affects all versions of Claws Mail prior to 3.13.1.
4
Can CVE-2015-8614 be exploited remotely?
Yes, CVE-2015-8614 can be exploited remotely via specially crafted emails.
5
What functions are involved in the vulnerability CVE-2015-8614?
The functions involved in CVE-2015-8614 are conv_jistoeuc, conv_euctojis, and conv_sjistoeuc in codeconv.c.