JVN#23727054

Pochy denial-of-service (DoS) vulnerability

Overview

Pochy, email client software operating in the Microsoft Windows environment, contains a vulnerability that may cause the processing to stop while the CPU load is high and a denial-of-service (DoS) after receiving a specific string.

Products Affected

• Pochy 0.2.1a

Description

Impact

A remote attacker could exploit this vulnerability to cause a denial-of-service (DoS) attack by sending a specially crafted email to a Pochy user.

Solution

Vendor Status

References

JPCERT/CC Addendum

Credit

WAKAI Kazunao of Information-technology Promotion Agency, Japan reported this vulnerability to IPA.
JPCERT/CC coordinated with the vendors under Information Security Early Warning Partnership.

Other Information

Update History