Signature Detail

HTTP: EasyMail Objects SubmitToExpress

This signature detects attempts to use unsafe ActiveX controls in EasyMail. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

EasyMail Objects is prone to a remote buffer-overflow vulnerability because the it fails to perform adequate boundary checks on user-supplied data before copying it to an insufficiently sized buffer. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts likely result in denial-of-service conditions. EasyMail Objects 'emsmtp.dll' 6.0.2.0 is vulnerable; other versions may also be affected. Spam Inspector 4.0.354 is vulnerable.

Affected Products

• Giant Company Spam Inspector 4.0.354
• Quiksoft EasyMail Objects 'emsmtp.dll' 6.0.2.0

References

• BugTraq: 41887
• BugTraq: 25467
• CVE: CVE-2007-4607
• URL: http://www.quiksoft.com