CVE-2017-12639

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETRE or ETCTERARED.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Oct 3, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-12647.5IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resourcCVE-2017-126408.8ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c.CVE-2017-126418.8ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c.CVE-2017-126428.8ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c.CVE-2017-126436.5ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.CVE-2017-126448.8ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c.CVE-2017-126456.1XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId.CVE-2017-126466.1XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address.CVE-2017-126476.1XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title.CVE-2017-126486.1XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL.CVE-2017-126496.1XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display.CVE-2017-12655.9IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates, a certificate. This
CVE-2017-12639: Critical severity, CVSS 9.8 | Vulnix