Back to CVE Browser

CVE-2004-1128

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1410%

EPSS Percentile3.64th

PublishedJan 10, 2005

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=110137313329955&w=2

🔗 http://www.security.org.sg/vuln/cmailserver52.html

🔗 http://www.securityfocus.com/bid/11742

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/18276

🔗 http://marc.info/?l=bugtraq&m=110137313329955&w=2

🔗 http://www.security.org.sg/vuln/cmailserver52.html

🔗 http://www.securityfocus.com/bid/11742

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/18276

Related Vulnerabilities

CVE-2004-090410.0

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird...

CVE-2004-101210.0

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arb...

CVE-2004-100610.0

Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via cer...

CVE-2004-106710.0

Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may al...