CVE-2007-1029

Опубликовано: 21 фев. 2007

Источник: nvd

CVSS2: 7.6

EPSS Средний

Описание

Stack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail Objects before 6.5 allows remote attackers to execute arbitrary code via a long host name.

Ссылки

http://secunia.com/advisories/24199
Vendor Advisory
http://security-assessment.com/files/advisories/easymail_advisory.pdf
Vendor Advisory
http://securityreason.com/securityalert/2277
http://www.osvdb.org/33208
http://www.securityfocus.com/archive/1/460237/100/0/threaded
http://www.securityfocus.com/bid/22583
Patch
http://www.vupen.com/english/advisories/2007/0634
https://exchange.xforce.ibmcloud.com/vulnerabilities/32540
http://secunia.com/advisories/24199
Vendor Advisory
http://security-assessment.com/files/advisories/easymail_advisory.pdf
Vendor Advisory
http://securityreason.com/securityalert/2277
http://www.osvdb.org/33208
http://www.securityfocus.com/archive/1/460237/100/0/threaded
http://www.securityfocus.com/bid/22583
Patch
http://www.vupen.com/english/advisories/2007/0634
https://exchange.xforce.ibmcloud.com/vulnerabilities/32540

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:quicksoft:easymail_objects:*:*:*:*:*:*:*:*

Версия до 6.4 (включая)

EPSS

Процентиль: 96%

0.22841

Средний

7.6 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-p94q-cj35-2pgh

github

почти 4 года назад