CVE-2009-1647 — HIGH (9.3) — White Hats Nepal

Vulnerability Description

Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of service (application crash) via a long string in a +OK response. NOTE: some of these details are obtained from third party information.

CVSS Score

9.3

HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Ultrafunk	Popcorn	1.87

Related Weaknesses (CWE)

CWE-119

References

http://www.securityfocus.com/bid/34699Exploit
http://www.vupen.com/english/advisories/2009/1170Vendor Advisory
https://www.exploit-db.com/exploits/8526
http://www.securityfocus.com/bid/34699Exploit
http://www.vupen.com/english/advisories/2009/1170Vendor Advisory
https://www.exploit-db.com/exploits/8526

FAQ

What is CVE-2009-1647?

CVE-2009-1647 is a vulnerability with a CVSS score of 9.3 (HIGH). Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of service (application crash) via a long string in a +OK response. NOTE: some of thes...

How severe is CVE-2009-1647?

CVE-2009-1647 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2009-1647?

Check the references section above for vendor advisories and patch information. Affected products include: Ultrafunk Popcorn.