Description
Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allows remote attackers to execute arbitrary code via a long email message header, which triggers a one-byte buffer overflow.
References
- http://secunia.com/secunia_research/2005-61/advisory/
- 20051220 Secunia Research: Pegasus Mail Buffer Overflow and Off-by-OneVulnerabilities mailing-list
- 1015385 vdb-entry
- 17992 third-party-advisory
- 15973 vdb-entry
- 21843 vdb-entry
- http://www.pmail.com/newsflash.htm#secunia