CVE-2004-2719: Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to exe...

Security readout for executives and security teams

Foxmail 5.0.300 contains a buffer overflow in PunyLib.dll that can let an attacker run code by sending a specially malformed email sender field. This is a legacy client issue, but any remaining use creates endpoint compromise risk from email alone. Exposure is likely limited to environments that still run Foxmail 5.0.300 or preserve it on legacy workstations. The supplied affected-product metadata is incomplete, so validation should rely on software inventory and endpoint discovery rather than CPE data. Treat this as a high-priority legacy software cleanup item if Foxmail is present. If it is absent, business risk is low, but confirm through inventory because the vulnerable path is email-triggered remote code execution. Mitigation focus: Inventory and remove Foxmail 5.0.300 from managed endpoints.; Check vendor or archival guidance for fixed Foxmail versions.; Block or quarantine malformed email headers at mail gateways where feasible..

Prepared

Jun 29, 2026, 02:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.