Buffer Overflow in cgiemail by CGI-Email Software
CVE-2002-1652
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 43%
What is CVE-2002-1652?
A buffer overflow vulnerability exists in the cgiemail 1.6 application, specifically in the cgicso.c file. This flaw allows remote attackers to exploit the application through specially crafted query parameters that exceed the buffer capacity. Consequently, this may crash the application, resulting in a denial of service, and could potentially allow attackers to execute arbitrary code on the affected system, posing significant security risks.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.