Pegasus Mail Message Header Buffer Overflow Vulnerability

Bugtraq ID:	5302
Class:	Boundary Condition Error
CVE:	CVE-2002-1075
Remote:	Yes
Local:	No
Published:	Jul 24 2002 12:00AM
Updated:	Jul 11 2009 02:56PM
Credit:	Discovered by Auriemma Luigi <[email protected]>.
Vulnerable:	David Harris Pegasus Mail 4.0 1
Not Vulnerable:

Pegasus Mail Message Header Buffer Overflow Vulnerability

Pegasus Mail is an email client for Microsoft Windows and DOS based systems. A buffer overflow vulnerability has been reported in some versions of Pegasus Mail.

Reportedly, Pegasus is vulnerable to a buffer overflow condition when processing some long message headers. If either the 'To:' or 'From:' message headers are longer than approximately 259 characters, Pegasus may crash when displaying the message.

This issue has been reported in Pegasus Mail 4.01. Earlier versions may share this vulnerability, this has not however been confirmed.

Pegasus Mail Message Header Buffer Overflow Vulnerability

A proof of concept has been provided by Auriemma Luigi <[email protected]>:

• /data/vulnerabilities/exploits/pegasus.zip

Pegasus Mail Message Header Buffer Overflow Vulnerability

Solution:
Upgrade to Pegasus Mail 4.02:


David Harris Pegasus Mail 4.0 1

• David Harris Pegasus Mail 4.02
  ftp://risc.ua.edu/pegasus/winpmail/w32-402.exe

Pegasus Mail Message Header Buffer Overflow Vulnerability

References:

• Pegasus Mail Product Homepage (David Harris)