Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Balsa Fetch命令远程栈缓冲区溢出漏洞
Vulnerability Description
BALSA是GNOME下的邮件客户端软件,支持POP3和IMAP协议。 BALSA在处理畸形IMAP回应数据时存在缓冲区溢出漏洞,恶意IMAP网站可能利用此漏洞控制用户系统。 BALSA的libbalsa/imap/imap-handle.c文件中的ir_fetch_seq()函数没有正确地处理FETCH命令的超长回复,如果用户受骗连接到了恶意的IMAP服务器的话,就可能触发栈溢出,导致执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A