CVE:CVE-2003-0143
CNNVD:CNNVD-200303-046
Qpopper 4.0.5fc2之前4.0.x版本的pop_msg函数在Qvsnprintf调用消息缓冲区后没有将其空终止，认证用户可以借助带有超长宏名称的mdef命令的缓冲区溢出执行任意代码。
solution:Upgrade qualcomm qpopper to a higher version than 4.0.1,4.0.2,4.0.3,4.0.4,and avoid the version 4.0.1,4.0.2,4.0.3,4.0.4