CVE-2015-8614
Fixed in a distro release EPSS 3%
Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion.
Products: claws-mail, opensuse leap, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | claws-mail | 3.13.1-1 |
| Debian 12 | macopix | 1.7.4-6 |
| Debian 13 | claws-mail | 3.13.1-1 |
| Debian 13 | macopix | 1.7.4-6 |
| Debian 14 | claws-mail | 3.13.1-1 |
| Debian 14 | macopix | 1.7.4-6 |
| Debian 6.0 | claws-mail | 3.7.6-4+squeeze2 |
| Debian 7 | claws-mail | 3.8.1-2+deb7u1 |
| Debian 8 | claws-mail | 3.11.1-3+deb8u1 |
| Ubuntu 16.04 LTS | macopix | no fix |