Vendor
VMime version 0.9.2 and earlier contains an integer underflow vulnerability in the uuEncoder::decode function, allowing remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts.