CVE-2006-6940: Owa

High severity, CVSS 10.0. EPSS: 4.6% chance of exploitation in the next 30 days.

Buffer overflow in the ParseHeader function in clsOWA.cls in POP3/SMTP to OWA (pop2owa) 1.1.3 allows remote attackers to execute arbitrary code via a long header in an e-mail message.

Affected products

• Owa Owa: version 1.1.3 only

Published 2007-01-17. Last modified 2026-06-16.