GitHub Advisoryadvisory · Packagist

GHSA-r9mw-gwx9-v3h5 zend-mail remote code execution via Sendmail adapter

CRITICAL Published 2022-05-14 Modified 2024-04-23 Official page ↗
Aliases
CVE-2016-10034
Ecosystem
Packagist
Packages
zendframework/zend-mail
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77
Reviewed
2024-04-23

Affected packages

• Packagist zendframework/zend-mail: < 2.4.11 → fixed in 2.4.11 • Packagist zendframework/zend-mail: >= 2.5, <= 2.5.2 (no fix yet) • Packagist zendframework/zend-mail: >= 2.6, <= 2.6.2 (no fix yet) • Packagist zendframework/zend-mail: >= 2.7, < 2.7.2 → fixed in 2.7.2

Description

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address.

Related

Alias · CVE (1)

  • CVE-2016-10034 The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend… vulnerability

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References