CVEvulnerability
CVE-2007-5007
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
Affected configurations
• gnome balsa 1.1.7
• gnome balsa 1.2.4
• gnome balsa 1.4
• gnome balsa 1.4.3
• gnome balsa 2.0.6
• gnome balsa 2.0.10
• gnome balsa 2.0.16
• gnome balsa 2.0.17
• gnome balsa 2.0.18
• gnome balsa 2.1
• gnome balsa 2.1.1
• gnome balsa 2.1.2
• gnome balsa 2.1.3
• gnome balsa 2.1.90
• gnome balsa 2.1.91
• gnome balsa 2.2
• gnome balsa 2.2.1
• gnome balsa 2.2.2
• gnome balsa 2.2.3
• gnome balsa 2.2.4
• gnome balsa 2.2.5
• gnome balsa 2.2.6
• gnome balsa 2.3
• gnome balsa 2.3.1
• gnome balsa 2.3.2
• gnome balsa 2.3.3
• gnome balsa 2.3.4
• gnome balsa 2.3.5
• gnome balsa 2.3.6
• gnome balsa 2.3.7
• gnome balsa 2.3.8
• gnome balsa 2.3.10
• gnome balsa 2.3.11
• gnome balsa 2.3.12
• gnome balsa 2.3.13
• gnome balsa 2.3.14
• gnome balsa 2.3.15
• gnome balsa 2.3.16
• gnome balsa 2.3.17
• gnome balsa 2.3.19
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://bugs.gentoo.org/show_bug.cgi?id=193179 Exploit
- http://bugzilla.gnome.org/show_bug.cgi?id=474366 bugzilla.gnome.org
- http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.html Patch
- http://osvdb.org/40585 osvdb.org
- http://secunia.com/advisories/26947 Vendor Advisory
- http://secunia.com/advisories/26987 Vendor Advisory
- http://secunia.com/advisories/27272 Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200710-17.xml www.gentoo.org
- http://www.novell.com/linux/security/advisories/2007_19_sr.html www.novell.com
- http://www.securityfocus.com/bid/25777 Patch
- http://www.vupen.com/english/advisories/2007/3263 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=297581 bugzilla.redhat.com
- http://bugs.gentoo.org/show_bug.cgi?id=193179 Exploit
- http://bugzilla.gnome.org/show_bug.cgi?id=474366 bugzilla.gnome.org
- http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.html Patch
- http://osvdb.org/40585 osvdb.org
- http://secunia.com/advisories/26947 Vendor Advisory
- http://secunia.com/advisories/26987 Vendor Advisory
- http://secunia.com/advisories/27272 Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200710-17.xml www.gentoo.org
- http://www.novell.com/linux/security/advisories/2007_19_sr.html www.novell.com
- http://www.securityfocus.com/bid/25777 Patch
- http://www.vupen.com/english/advisories/2007/3263 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=297581 bugzilla.redhat.com