Threats tagged 'ghsa-j8wv-w3cw-c6x3'

MailEnable Enterprise Premium versions before 10.62 have a heap overflow vulnerability in the IMAP X-FB-FETCH command. Authenticated users can trigger this by supplying an X-FB-USER address longer than approximately 1016 bytes, which is not properly length-checked. This causes a heap buffer overflow and crashes the IMAP service, resulting in denial of service.