CVE-2009-4663

Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitrary code via a long argument to the AddAttachment method.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

10.49% chance of exploitation in the next 30 days, 95th percentile

Published

2010-03-03

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://www.exploit-db.com/exploits/9705
• http://www.bmgsec.com.au/advisories/easymail-6-activex-exploit.txt

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/9705

References

• CVE Record
• NVD entry

Related

• CVE-2009-4661
• CVE-2009-4665
• CVE-2009-4660
• CVE-2009-4666
• CVE-2009-4659
• CVE-2009-4667