CVE-2009-1647: Ultrafunk Popcorn

High severity, CVSS 9.3. EPSS: 2.7% chance of exploitation in the next 30 days.

Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of service (application crash) via a long string in a +OK response. NOTE: some of these details are obtained from third party information.

Affected products

• Ultrafunk Popcorn: version 1.87 only

Published 2009-05-15. Last modified 2026-06-16.