Nico Leidecker has reported a vulnerability in SurgeMail, which can be exploited by malicious users to potentially compromise a vulnerable system.

The vulnerability is caused due to a format string error when processing the "amout" value of payment emails. This can potentially be exploited to execute arbitrary code by setting a specially crafted "amount" value.

Successful exploitation requires the privileges to change the "amount" of payment emails.

The vulnerability is reported in version 3.7b8. Other versions may also be affected.

Solution
Reportedly, this has been fixed. Contact the vendor for further details.

Provided and/or discovered by
Nico Leidecker, Portcullis Computer Security Ltd.

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20070710/98374694/attachment-0029.txt

Deep Links
Links available to Secunia VIM customers