VULNERABILITY INTELLIGENCE
CVE-2008-1277
CVSS score9 HIGH
EPSS probability8.25%
CISA KEVNot currently listed
Published2008-03-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Description
The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which triggers a NULL pointer dereference.
Weakness classification
- CWE-20: Improper Input Validation