What is CVE-2017-12638?

CVE-2017-12638 is a critical-severity vulnerability in Ipswitch Imail_server, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2017-10-03.

How severe is CVE-2017-12638?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Ipswitch Imail_server

CVE-2017-12638

Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETBL or ETCETERABLUE.

Vulnerability class: Buffer Overflow

EPSS: 0.025 (83.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ipswitch Imail_server
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-12638?: CVE-2017-12638 is a critical-severity vulnerability in Ipswitch Imail_server, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2017-10-03.
How severe is CVE-2017-12638?: Critical severity. CVSS v3 base score is 9.8 out of 10.