This host is installed with FoxMail Client and is prone to Buffer Overflow Vulnerability.

Successful exploitation will allow attacker to insert a long crafted URI in the MAILTO field and can cause a stack overflow to the application. Impact Level: Application

No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. For updates refer to http://www.foxmail.com.cn

This flaw is due to lack of sanitization and boundary check in the user supplied data which can be exploited by adding a long URL length in the HREF attribute of an A element.

Foxmail version 6.5 or prior on Windows.

• http://www.sebug.net/exploit/4681
• http://xforce.iss.net/xforce/xfdb/45343

---

Updated on 2015-03-25