CVEvulnerability

CVE-2007-2958

6.8 MEDIUM Published 2007-08-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-08-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies.

Affected configurations

• sylpheed sylpheed 2.4.4 • sylpheed-claws sylpheed-claws 1.9.100 • sylpheed-claws sylpheed-claws 2.10.0

References