CVE-2015-8614

Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion.

• CWE-119

• http://git.claws-mail.org/?p=claws.git%3Ba=commit%3Bh=d390fa07f5548f3173dd9cc13b233db5ce934c82
• http://lists.opensuse.org/opensuse-updates/2016-01/msg00000.html
• http://www.claws-mail.org/news.phpPatch, Vendor Advisory
• http://www.debian.org/security/2016/dsa-3452
• http://www.openwall.com/lists/oss-security/2015/12/21/10
• http://www.openwall.com/lists/oss-security/2015/12/22/2
• http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3557Issue Tracking
• https://security.gentoo.org/glsa/201606-11Issue Tracking
• http://git.claws-mail.org/?p=claws.git%3Ba=commit%3Bh=d390fa07f5548f3173dd9cc13b233db5ce934c82
• http://lists.opensuse.org/opensuse-updates/2016-01/msg00000.html
• http://www.claws-mail.org/news.phpPatch, Vendor Advisory
• http://www.debian.org/security/2016/dsa-3452
• http://www.openwall.com/lists/oss-security/2015/12/21/10
• http://www.openwall.com/lists/oss-security/2015/12/22/2
• http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3557Issue Tracking
• https://security.gentoo.org/glsa/201606-11Issue Tracking

Published

Apr 11, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8606Multiple cross-site scripting (XSS) vulnerabilities in Silve…
• CVE-2015-8607The canonpath function in the File::Spec module in PathTools…
• CVE-2015-8608The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22…
• CVE-2015-8611BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Control…
• CVE-2015-8612The EnableNetwork method in the Network class in plugins/mec…
• CVE-2015-8613Stack-based buffer overflow in the megasas_ctrl_get_info fun…6.5
• CVE-2015-8615The hvm_set_callback_via function in arch/x86/hvm/irq.c in X…
• CVE-2015-8616Use-after-free vulnerability in the Collator::sortWithSortKe…
• CVE-2015-8617Format string vulnerability in the zend_throw_or_error funct…
• CVE-2015-8618The Int.Exp Montgomery code in the math/big library in Go 1.…
• CVE-2015-8619The Human Monitor Interface support in QEMU allows remote at…7.5
• CVE-2015-8620Heap-based buffer overflow in the Avast virtualization drive…7.8