Is CVE-2015-8708 actively exploited?

No active exploitation of CVE-2015-8708 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2015-8708 be exploited remotely?

Yes. CVE-2015-8708 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2015-8708?

CVE-2015-8708 has a CVSS score of 7.3 (HIGH).

HOME VULNERABILITIESCVE-2015-8708

HIGH

CVE-2015-8708

CWE-119Published: April 11, 2016· Updated: Jun 17, 2026

7.3

CVSS v3.1

Official Description

Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8614.

NVD Source

Technical Analysis

CVE-2015-8708 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

From a weakness classification perspective (CWE-119): Buffer overflow vulnerabilities can lead to arbitrary code execution or denial of service by corrupting adjacent memory.