Pegasus Mail 4.72
Approved changes feed: RSS · Atom
cpe:2.3:a:pmail:pegasus:4.72:*:*:*:*:*:*:*
part: a version: 4.72 update: *
| Vendor | Pmail (f57d8d56-eb3b-5c71-b2c5-63c7f2ad8417) |
|---|---|
| Product | Pegasus (53346d9c-ed1f-5487-873d-b5a2eda9d5c5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-9046 |
vulnerable | 2026-06-08 05:10:09.289980 |
Details available
winpm-32.exe in Pegasus Mail (aka Pmail) v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed locally. For example, if ssgp.dll is on the desktop and executes arbitrary code in the DllMain function, then clicking on a mailto: link on a remote web page triggers the attack.
Published: 2017-05-21T14:00:00.000Z
Updated: 2024-08-05T16:55:21.916Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.