Vulnerabilities

TI-2010-04987 CVE-2010-5289 · GHSA-rj6f-6v3m-hmhr

Buffer overflow in the Authenticate method in the INCREDISPOOLERLib.Pop ActiveX control…

LOW 37

Buffer overflow in the Authenticate method in the INCREDISPOOLERLib.Pop ActiveX control in ImSpoolU.dll in IncrediMail 2.0 allows remote attackers to cause a denial of service (application crash) or possibly have unspeci…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02384 Published 2013-08-25 No fix listed CWE-119

TI-2008-05169 CVE-2008-5429 · GHSA-mmj8-qxh6-33c9

Incredimail build 5853710 does not properly handle (1) multipart/mixed e-mail messages…

LOW 23

Incredimail build 5853710 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attacker…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01244 Published 2008-12-11 No fix listed CWE-399

TI-2007-01621 CVE-2007-1683 · GHSA-gw7j-m9m7-phch

Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail…

MEDIUM 57

Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.dll) allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.37744 Published 2007-04-26 No fix listed

TI-2002-00440 CVE-2002-0455 · GHSA-cpfj-rgqq-r3wx

IncrediMail stores attachments in a directory with a fixed name, which could make it…

LOW 26

IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01343 Published 2002-06-11 No fix listed

TI-2001-00623 CVE-2001-0642 · GHSA-vhx2-58f3-9f8j

Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local…

LOW 12

Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive by appending ..

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00491 Published 2001-08-29 No fix listed