CVE-2020-7845CWE-121

Jiransecurity Spamsniper Stack-based Buffer Overflow Vulnerability

High · published December 27, 2020

CVSS v3.1
8.1
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

Spamsniper 5.0 ~ 5.2.7 contain a stack-based buffer overflow vulnerability caused by improper boundary checks when parsing MAIL FROM command. It leads remote attacker to execute arbitrary code via crafted packet.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02796 · 86.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2020-12-27T01:26Z
EPSS history
Timeline
  • 27 DEC 01:26Z
    Jiransecurity Spamsniper Stack-based Buffer Overflow Vulnerability
    cvelistv5