Description: A vulnerability has been reported in Balsa, which potentially can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to a boundary within the "ir_fetch_seq()" function in libbalsa/imap/imap-handle.c when handling an overly long reply to the "FETCH" command. This can be exploited to cause a stack-based buffer overflow by tricking a user into connecting to a malicious IMAP server.
The vulnerability is reported in versions prior to 2.3.20.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
