CVE-2004-2401: Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML message with long "tag text."

Unscored severity · published Dec 31, 2004

CVE-2004-2401

Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML message with long "tag text."

–

CVSS

3.5%

EPSS

On KEV

Exploitation

Is it being used?

Exploit prediction (EPSS)3.5% · higher than 89% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Imail Express · Ipswitch

8.03 · source: NVD

Affected product

Imail Express

Ipswitch

All Imail Express CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2004-2401

CVE.org

https://www.cve.org/CVERecord?id=CVE-2004-2401

Patch

http://secunia.com/advisories/11352

support.ipswitch.com

http://support.ipswitch.com/kb/IM-20031219-DF01.htm

Patch

http://www.osvdb.org/5243

Patch

http://www.securityfocus.com/bid/10106

exchange.xforce.ibmcloud.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/15841