CVE-2015-8614

Published: Apr 11, 2016Modified: May 6, 2026

7.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: NVD

Description

Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion.

Affected (4)

Products: Claws Mail: Claws Mail · Opensuse: Leap, Opensuse

1 product

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Claws Mail Claws Mail	Up to 3.13.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (16)

http://git.claws-mail.org/?p=claws.git%3Ba=commit%3Bh=d390fa07f5548f3173dd9cc13b233db5ce934c82

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2016-01/msg00000.html

Source: secalert@redhat.com

http://www.claws-mail.org/news.php

Source: secalert@redhat.com

PatchVendor Advisory

http://www.debian.org/security/2016/dsa-3452

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2015/12/21/10

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2015/12/22/2

Source: secalert@redhat.com

http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3557

Source: secalert@redhat.com

Issue Tracking

https://security.gentoo.org/glsa/201606-11

Source: secalert@redhat.com

Issue Tracking

http://git.claws-mail.org/?p=claws.git%3Ba=commit%3Bh=d390fa07f5548f3173dd9cc13b233db5ce934c82

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2016-01/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.claws-mail.org/news.php

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.debian.org/security/2016/dsa-3452

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2015/12/21/10

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2015/12/22/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3557

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://security.gentoo.org/glsa/201606-11

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

Timeline

No history available yet.