Secunia

Multiple vulnerabilities have been reported in Kerio MailServer, where some potentially can be exploited by malicious people to cause a DoS (Denial of Service) and others have an unknown impact.

The vulnerabilities are reportedly caused due to the following errors:

1) An infinite recursion within the parsing of Caller ID records.

2) An unspecified error within the DNS parser when processing malformed packets.

3) An integer overflow within the message size check in SMTP.

4) A division by zero when procesing empty messages.

5) An error within the McAfee plugin on Apple Mac, which may crash it during high loads.

6) An error within the AVG plugin for Linux, which may crash it when processing certain messages.

Solution
Update to version 5.7.10.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Original Advisory
http://www.kerio.com/kms_history.html

Deep Links
Links available in Customer Area