Some vulnerabilities have been reported in EasyMail Objects, which can be exploited by malicious people to compromise a user's system.

1) A boundary error exists within the IMAP4 component of EasyMail Objects when processing arguments passed to the "Connect" method. This can be exploited to cause a stack-based buffer overflow via an overly long (greater than 500 bytes) string passed as the host name argument to the said method.

2) A boundary error exists within the SMTP component of EasyMail Objects when processing arguments passed to the "SubmitToExpress()" method. This can be exploited to cause a stack-based buffer overflow by passing an overly long argument to the affected method.

3) A boundary error exists in the EasyMail.IMAP4.6 ActiveX control (emimap4.dll) when handling the "LicenseKey" property. This can be exploited to cause a stack-based buffer overflow by assigning an overly long string to the "LicenseKey" property.

4) A boundary error exists in the EasyMail.SMTP.6 ActiveX control (emsmtp.dll) when handling calls to the "AddAttachment()" method. This can be exploited to cause a stack-based buffer overflow by passing an overly long argument to the affected method.

Vulnerabilities #2 through #4 are confirmed in emsmtp.dll and emimap4.dll version 6.0.2.0. Other versions may also be affected.

Successful exploitation allows execution of arbitrary code and requires that the user is e.g. tricked into visiting a malicious web site.

Solution
Update to version 6.5.

Provided and/or discovered by
1) Paul Craig, Security-Assessment.com
2) Independently discovered by rgod and Will Dormann of the CERT/CC
3) Francis Provencher (Protek Research Lab's)
4) bmgsec

Changelog
Further details available to Secunia VIM customers

Original Advisory
1) Security-Assessment.com:
http://security-assessment.com/files/advisories/easymail_advisory.pdf

2) http://milw0rm.com/exploits/4328
3) http://milw0rm.com/exploits/9684
4) http://www.bmgsec.com.au/advisory/48/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers