CVE-2006-0709

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-02-15 · updated 2026-06-16

Description

Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105.

Affected products

Metamail Corporation Metamail: 2.7.50

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482
http://secunia.com/advisories/18796
http://secunia.com/advisories/18987
http://secunia.com/advisories/19000
http://secunia.com/advisories/19130
http://secunia.com/advisories/19226
http://secunia.com/advisories/19304
http://securitytracker.com/id?1015654
http://www.debian.org/security/2006/dsa-995
http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml
http://www.novell.com/linux/security/advisories/2006_05_sr.html
http://www.redhat.com/support/errata/RHSA-2006-0217.html

Get alerted when CVE-2006-0709 or the next vulnerability affects your stack