CVE-2015-8708: Claws-Mail

High severity, CVSS 7.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614.

Affected products

• Claws-Mail Claws-Mail: version 3.13.1 only

Published 2016-04-11. Last modified 2026-06-17.