CVE-2010-20119

216.73.217.176

· Published 21/08/2025 20:15 · Modified 21/08/2025 20:15

Labels: CVE-2010-20119 2025-08-21 CVE-2010-20119 CWE-121 [email protected]

Essential information

Published: 21/08/2025 20:15
Modified: 21/08/2025 20:15
Author: —
Creator: —
CVSS: 8.6 HIGH (v3) 8.6 HIGH (v4.0)
CISA KEV: No
CWE: —
CVSS vector: —

CVSS metrics

Description

CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.dll and AOSMTP.dll ActiveX controls, specifically within the AddAttachments() method. This method fails to properly validate the length of input strings, allowing data to exceed the bounds of a fixed-size stack buffer. When invoked with an overly long string, the control can corrupt adjacent memory structures, including exception handlers, leading to potential control flow disruption.

NVD status

Status: Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
communicrypt / mail	`cpe:2.3:a:communicrypt:mail::::::::`
communicrypt / ansmtp	`cpe:2.3:a:communicrypt:ansmtp::::::::`
communicrypt / aosmtp	`cpe:2.3:a:communicrypt:aosmtp::::::::`