CVE-2020-7845

Jiransecurity Spamsniper Stack-based Buffer Overflow Vulnerability

State: Published
Severity: 8.1 High
Published: Dec 27, 2020
Updated: Aug 4, 2024
Reserved: Jan 22, 2020

Description

Spamsniper 5.0 ~ 5.2.7 contain a stack-based buffer overflow vulnerability caused by improper boundary checks when parsing MAIL FROM command. It leads remote attacker to execute arbitrary code via crafted packet.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	krcert

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
SpamsniperJiransecurity	5.2.7 through 5.7.8 revision 5500Affected

References

https://www.jiransecurity.com/
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35855

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.