Threats tagged 'ghsa-qvwh-gpqc-cpp8'

VMime versions through 0.9.2 have an information disclosure vulnerability in the uuEncoder::decode function. This flaw causes uninitialized stack memory to be written into decoded output when processing over-long lines in uuencode or x-uuencode MIME parts. An attacker can exploit this by sending crafted MIME parts with large line length bytes, potentially leaking up to 15 bytes of stack memory per line in decoded attachments.