Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution.
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Surgemail | Netwin | 3.8f3 (including) | 3.8f3 (including) |
| Surgemail | Netwin | 3.8i (including) | 3.8i (including) |
| Surgemail | Netwin | 3.8i2 (including) | 3.8i2 (including) |
| Webmail | Netwin | 3.1s1 (including) | 3.1s1 (including) |
| Webmail | Netwin | 3.1s13 (including) | 3.1s13 (including) |