Secunia

A vulnerability has been reported in Becky! Internet Mail, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error when handling read receipt requests. This can be exploited to cause a buffer overflow when the user agrees to return a receipt message for a specially crafted e-mail.

Successful exploitation of this vulnerability may allow execution of arbitrary code.

This vulnerability is reported in version 2.48.02 and prior.

Solution
Update to version 2.50.

Provided and/or discovered by
Yuji Ukai

Changelog
Further details available in Customer Area

Original Advisory
Fourteenfourty:
http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20090212

JVN:
http://jvn.jp/en/jp/JVN29641290/index.html

RimArts Inc:
http://www.rimarts.jp/downloads/B2/Readme-e.txt

IPA:
http://www.ipa.go.jp/security/vuln/documents/2009/200902_becky.html

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area