Buffer overflow in the ParseHeader function in clsOWA.cls in POP3/SMTP to OWA (pop2owa) 1.1.3 allows remote attackers to execute arbitrary code via a long header in an e-mail message.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Owa | Owa | 1.1.3 (including) | 1.1.3 (including) |
References
- http://sourceforge.net/project/shownotes.php?release_id=473941\u0026group_id=152204
- http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1621688\u0026group_id=152204\u0026atid=783596
- http://www.vupen.com/english/advisories/2007/0160
- http://sourceforge.net/project/shownotes.php?release_id=473941\u0026group_id=152204
- http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1621688\u0026group_id=152204\u0026atid=783596
- http://www.vupen.com/english/advisories/2007/0160