CVEvulnerability
CVE-2018-0684
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-11-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier) allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via multipart/form-data format data.
Affected configurations
• neo debun imap (<= 3.3i r4.0)
• neo debun pop (<= 3.3p r4.0)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://jvn.jp/en/jp/JVN00344155/index.html Third Party Advisory
- https://www.denbun.com/en/imap/support/security/181003.html Vendor Advisory
- https://www.denbun.com/en/pop/support/security/181003.html Vendor Advisory
- http://jvn.jp/en/jp/JVN00344155/index.html Third Party Advisory
- https://www.denbun.com/en/imap/support/security/181003.html Vendor Advisory
- https://www.denbun.com/en/pop/support/security/181003.html Vendor Advisory