CVE-2007-5007 Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
MediumCVSS 6.8
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME balsa | = 1.1.7 | No fix listed |
| GNOME balsa | = 1.2.4 | No fix listed |
| GNOME balsa | = 1.4 | No fix listed |
| GNOME balsa | = 1.4.3 | No fix listed |
| GNOME balsa | = 2.0.6 | No fix listed |
| GNOME balsa | = 2.0.10 | No fix listed |
| GNOME balsa | = 2.0.16 | No fix listed |
| GNOME balsa | = 2.0.17 | No fix listed |
| GNOME balsa | = 2.0.18 | No fix listed |
| GNOME balsa | = 2.1 | No fix listed |
| GNOME balsa | = 2.1.1 | No fix listed |
| GNOME balsa | = 2.1.2 | No fix listed |
| GNOME balsa | = 2.1.3 | No fix listed |
| GNOME balsa | = 2.1.90 | No fix listed |
| GNOME balsa | = 2.1.91 | No fix listed |
| GNOME balsa | = 2.2 | No fix listed |
| GNOME balsa | = 2.2.1 | No fix listed |
| GNOME balsa | = 2.2.2 | No fix listed |
| GNOME balsa | = 2.2.3 | No fix listed |
| GNOME balsa | = 2.2.4 | No fix listed |
| GNOME balsa | = 2.2.5 | No fix listed |
| GNOME balsa | = 2.2.6 | No fix listed |
| GNOME balsa | = 2.3 | No fix listed |
| GNOME balsa | = 2.3.1 | No fix listed |
| GNOME balsa | = 2.3.2 | No fix listed |
Show 18 more
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME balsa | = 2.3.3 | No fix listed |
| GNOME balsa | = 2.3.4 | No fix listed |
| GNOME balsa | = 2.3.5 | No fix listed |
| GNOME balsa | = 2.3.6 | No fix listed |
| GNOME balsa | = 2.3.7 | No fix listed |
| GNOME balsa | = 2.3.8 | No fix listed |
| GNOME balsa | = 2.3.10 | No fix listed |
| GNOME balsa | = 2.3.11 | No fix listed |
| GNOME balsa | = 2.3.12 | No fix listed |
| GNOME balsa | = 2.3.13 | No fix listed |
| GNOME balsa | = 2.3.14 | No fix listed |
| GNOME balsa | = 2.3.15 | No fix listed |
| GNOME balsa | = 2.3.16 | No fix listed |
| GNOME balsa | = 2.3.17 | No fix listed |
| GNOME balsa | = 2.3.19 | No fix listed |
| debian/balsa(Debian:12) | < 2.3.20-1 | 2.3.20-1 |
| debian/balsa(Debian:13) | < 2.3.20-1 | 2.3.20-1 |
| debian/balsa(Debian:14) | < 2.3.20-1 | 2.3.20-1 |
References
- bugs.gentoo.org exploit
- bugzilla.gnome.org
- [ANNOUNCE] 20070907 balsa-2.3.20 released mailing-list patch
- 40585 vdb-entry
- 26947 third-party-advisory vendor-advisory
- 26987 third-party-advisory vendor-advisory
- 27272 third-party-advisory vendor-advisory
- GLSA-200710-17 vendor-advisory
- SUSE-SR:2007:019 vendor-advisory
- 25777 patch vdb-entry
- ADV-2007-3263 vdb-entry
- bugzilla.redhat.com
- Debian Security Tracker CVE-2007-5007 vendor-advisory