US-CERT is aware of publicly available exploit code for vulnerabilities in the Quiksoft EasyMail SMTP ActiveX control. This control is packaged with several applications, including Earthlink internet access software. These stack buffer overflow vulnerabilities may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.  More information about this vulnerability can be found in the Vulnerability Note VU#281977.US-CERT recommends the workarounds as described in Vulnerability Note VU#281977 to help mitigate the security risks.

Read More…
Source: US CERT