Vulnerability in Owa

CVE-2006-6940

Buffer overflow in the ParseHeader function in clsOWA.cls in POP3/SMTP to OWA (pop2owa) 1.1.3 allows remote attackers to execute arbitrary code via a long header in an e-mail message.

EPSS: 0.046 (90.6th percentile) — read the EPSS interpretation.

Affected products

Owa — versions 1.1.3
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)