CVE-2015-8708

CVE-2015-8708 describes a stack-based buffer overflow in the Claws Mail email client, specifically within the conv_euctojis function in codeconv.c. This vulnerability, affecting Claws Mail 3.13.1, allows remote attackers to achieve unspecified impact through a crafted email involving Japanese character set conversion, and it arose from an incomplete fix for a previous vulnerability. The CVSS v3.0 score of 7.3 (High) indicates a significant risk, with a network-based attack vector requiring no user interaction or privileges, potentially leading to low impact on confidentiality, integrity, and availability. Despite its severity, the Exploit Prediction Scoring System (EPSS) score is low, suggesting a low probability of exploitation in the wild. Currently, there is no known active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, indicating a lack of widespread attention or public awareness.