• info
• discussion
• exploit
• solution
• references

EasyMail Objects 'SubmitToExpress()' Method Remote Stack Buffer Overflow Vulnerability

EasyMail Objects is prone to a remote buffer-overflow vulnerability because the it fails to perform adequate boundary checks on user-supplied data before copying it to an insufficiently sized buffer.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts likely result in denial-of-service conditions.

EasyMail Objects 'emsmtp.dll' 6.0.2.0 is vulnerable; other versions may also be affected.
Spam Inspector 4.0.354 is vulnerable.