Description
CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application crash) via a (1) CON, (2) AUX, or (3) NUL device name in the filename of an attachment.
References
- JVN#55365709 third-party-advisory
- http://www.almail.com/vulnerability.html
- JVNDB-2015-000021 third-party-advisory