CVE-2007-4607 Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to ex...
HighCVSS 9.3
EPSS 56.4%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability than CVE-2007-1029. NOTE: this may have been fixed in version 6.0.3.15.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gate comm software postcast server pro | = 3.0.61 | No fix listed |
| quicksoft easymail objects | All versions | No fix listed |
References
- 20130424 Borland Caliber 11.0 Quiksoft EasyMail SMTP Object Buffer Overflows mailing-list
- 38335 vdb-entry
- retrogod.altervista.org
- 24199 third-party-advisory
- 26639 third-party-advisory
- VU#281977 third-party-advisory us-government-resource
- 25467 exploit vdb-entry
- community.ivanti.com
- easymail-submittoexpress-bo(36307) vdb-entry
- 4328 exploit