Unscored CVE-2015-0878 EUVD-2015-0888GHSA-5cc7-vxhf-927p

Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filenam…

Published Feb 20, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment.

References

JVN#77294617 third-party-advisory
http://www.almail.com/vulnerability.html
JVNDB-2015-000020 third-party-advisory