CVE-2007-3257 Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an arra...
MediumCVSS 6.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME evolution | = 1.11 | No fix listed |
| debian/evolution(Debian:12) | < 2.12.0-1 | 2.12.0-1 |
| debian/evolution(Debian:13) | < 2.12.0-1 | 2.12.0-1 |
| debian/evolution(Debian:14) | < 2.12.0-1 | 2.12.0-1 |
| debian/evolution-data-server(Debian:12) | < 1.10.2-2 | 1.10.2-2 |
| debian/evolution-data-server(Debian:13) | < 1.10.2-2 | 1.10.2-2 |
| debian/evolution-data-server(Debian:14) | < 1.10.2-2 | 1.10.2-2 |
References
- bugzilla.gnome.org
- [Evolution-hackers] 20070619 Evolution 2.11.4 , Evolution-Data-Server 1.11.4 , GtkHTML 3.15.4 and Evolution-Exchange 2.11.4 released mailing-list
- 37489 vdb-entry
- 25765 third-party-advisory
- 25766 third-party-advisory
- 25774 third-party-advisory
- 25777 third-party-advisory
- 25793 third-party-advisory
- 25798 third-party-advisory
- 25843 third-party-advisory
- 25880 third-party-advisory
- 25894 third-party-advisory
- 25906 third-party-advisory
- 25958 third-party-advisory
- 26083 third-party-advisory
- GLSA-200711-04 vendor-advisory
- DSA-1321 vendor-advisory
- DSA-1325 vendor-advisory
- GLSA-200707-03 vendor-advisory
- MDKSA-2007:136 vendor-advisory
- SUSE-SR:2007:014 vendor-advisory
- SUSE-SA:2007:042 vendor-advisory
- RHSA-2007:0509 vendor-advisory
- RHSA-2007:0510 vendor-advisory
- 20070615 rPSA-2007-0122-1 evolution-data-server mailing-list
- 24567 vdb-entry
- 1018284 vdb-entry
- USN-475-1 vendor-advisory
- ADV-2007-2282 vdb-entry
- gnome-imaprescan-code-execution(34964) vdb-entry
- oval:org.mitre.oval:def:11724 signature vdb-entry
- Debian Security Tracker CVE-2007-3257 vendor-advisory
- bugs.debian.org issue-tracking