CVE-2015-8708: Buffer Overflow
Stack-based buffer overflow in the conveuctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8708?
CVE-2015-8708 has a severity level of medium due to its potential for remote exploitation via crafted emails.
How do I fix CVE-2015-8708?
To fix CVE-2015-8708, users should upgrade to a patched version of Claws Mail or apply any available security updates.
What are the consequences of CVE-2015-8708?
The consequences of CVE-2015-8708 include possible remote code execution and denial of service through a buffer overflow.
Which version of Claws Mail is affected by CVE-2015-8708?
Claws Mail version 3.13.1 is specifically affected by CVE-2015-8708.
Is there a known workaround for CVE-2015-8708?
Currently, the recommended solution is to update to a secure version, as there are no effective workarounds for CVE-2015-8708.