RETIRED: MailBee Objects 'MailBee.dll' ActiveX Control Multiple Insecure Method Vulnerabilities
BID:27481
Info
RETIRED: MailBee Objects 'MailBee.dll' ActiveX Control Multiple Insecure Method Vulnerabilities
| Bugtraq ID: | 27481 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-0631 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 28 2008 12:00AM |
| Updated: | May 12 2015 07:49PM |
| Credit: | darkl0rd <[email protected]> is credited with the discovery of these issues. |
| Vulnerable: |
AfterLogic Mailsuite Pro 6.3 |
| Not Vulnerable: | |
Discussion
Exploit / POC
RETIRED: MailBee Objects 'MailBee.dll' ActiveX Control Multiple Insecure Method Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting user to view a specially crafted web document.
The following exploit code is available:
To exploit these issues, an attacker must entice an unsuspecting user to view a specially crafted web document.
The following exploit code is available:
Solution / Fix
RETIRED: MailBee Objects 'MailBee.dll' ActiveX Control Multiple Insecure Method Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RETIRED: MailBee Objects 'MailBee.dll' ActiveX Control Multiple Insecure Method Vulnerabilities
References:
References:
- Microsoft Knowledge Base Article 240797 (Microsoft)
- Vendor Homepage (Afterlogic)