Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2015-8614

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Claws-Mail是一款基于GTK+开发的邮件客户端（新闻阅读器）产品。 Claws Mail 3.13.1之前版本的codeconv.c文件中的‘conv_jistoeuc’、‘conv_euctojis’和‘conv_sjistoeuc’函数中存在基于栈的缓冲区溢出漏洞，该漏洞源于程序没有对用户提交的输入执行正确的边界检查。远程攻击者可利用该漏洞在受影响应用程序上下文中执行任意代码，也可能造成拒绝服务。

AI Predicted 9.8 Difficulty: Easy EPSS 3.11% · P87
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2015-8614

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Claws Mail‘src/codeconv.c’基于栈的缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Claws-Mail是一款基于GTK+开发的邮件客户端（新闻阅读器）产品。 Claws Mail 3.13.1之前版本的codeconv.c文件中的‘conv_jistoeuc’、‘conv_euctojis’和‘conv_sjistoeuc’函数中存在基于栈的缓冲区溢出漏洞，该漏洞源于程序没有对用户提交的输入执行正确的边界检查。远程攻击者可利用该漏洞在受影响应用程序上下文中执行任意代码，也可能造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2015-8614

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-8614

请登录查看更多情报信息。

Vendor Advisories for CVE-2015-8614 (1)

Mailing List Discussions for CVE-2015-8614 (3)

Other References for CVE-2015-8614 (3)

Same Patch Batch · n/a · 2016-04-11 · 40 CVEs total

CVE-2016-0709 Apache Jetspeed Portal Site Manager 路径遍历漏洞
CVE-2016-1235 OAR 安全漏洞
CVE-2016-2193 PostgreSQL 安全绕过漏洞
CVE-2016-2385 kamailio SEAS模块基于堆的缓冲区溢出
CVE-2016-3065 PostgreSQL pageinspect扩展安全漏洞
CVE-2016-3659 Cacti SQL注入漏洞
CVE-2016-3675 Huawei Policy Center SQL注入漏洞
CVE-2016-3676 Huawei E3276s USB modems 安全漏洞
CVE-2016-3678 多款Huawei Quidway交换机拒绝服务漏洞
CVE-2015-8240 多款F5产品拒绝服务漏洞
CVE-2012-6700 dhcpcd 拒绝服务漏洞
CVE-2016-0710 Apache Jetspeed User Manager服务SQL注入漏洞
CVE-2016-0711 Apache Jetspeed 跨站脚本漏洞
CVE-2016-0712 Apache Jetspeed 跨站脚本漏洞
CVE-2016-0783 Apache OpenMeetings 安全漏洞
CVE-2016-0784 Apache OpenMeetings 目录遍历漏洞
CVE-2016-2163 Apache OpenMeetings 跨站脚本漏洞
CVE-2016-2164 Apache OpenMeetings 安全漏洞
CVE-2016-2171 Apache Jetspeed User Manager服务安全漏洞
CVE-2016-2393 Lenovo Fingerprint Manager和Touch Fingerprint 安全漏洞

Showing top 20 of 40 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2015-8614

No comments yet

Leave a comment