Tumbleweed MailGate Email Firewall Multiple LHA Buffer Overflow Vulnerabilities

Tumbleweed MailGate Email Firewall Multiple LHA Buffer Overflow Vulnerabilities

Tumbleweed MailGate Email Firewall is prone to multiple buffer-overflow vulnerabilities in its LHA processing routines.

A successful attack can allow a remote attacker to corrupt process memory by triggering various overflow conditions in the LHA processing engine. This may lead to arbitrary code execution in the context of the MMSDecompose (a process of the EMF Decomposer component), resulting in a full compromise.

These vulnerabilities reportedly affect all versions of the Tumbleweed MailGate Email Firewall.