IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Incredimail | Incredimail | build_560 (including) | build_560 (including) |
| Incredimail | Incredimail | build_618 (including) | build_618 (including) |
| Incredimail | Incredimail | build_1400185 (including) | build_1400185 (including) |