Buffer Overflow in QPopper 4.0.x by Internet Communications Engine

CVE-2003-0143

Summary

The pop_msg function in QPopper versions 4.0.x prior to 4.0.5fc2 contains a vulnerability due to improper handling of message buffers resulting in a lack of null termination. This flaw allows authenticated users to exploit a buffer overflow when utilizing the mdef command with excessively long macro names, potentially leading to the execution of arbitrary code.

References