CVE-2007-5007

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2007-5007
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://bugs.gentoo.org/show_bug.cgi?id=193179 Exploit
http://bugzilla.gnome.org/show_bug.cgi?id=474366
http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.html Patch
http://osvdb.org/40585
http://secunia.com/advisories/26947 Vendor Advisory
http://secunia.com/advisories/26987 Vendor Advisory
http://secunia.com/advisories/27272 Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200710-17.xml
http://www.novell.com/linux/security/advisories/2007_19_sr.html
http://www.securityfocus.com/bid/25777 Patch
http://www.vupen.com/english/advisories/2007/3263
https://bugzilla.redhat.com/show_bug.cgi?id=297581
http://bugs.gentoo.org/show_bug.cgi?id=193179 Exploit
http://bugzilla.gnome.org/show_bug.cgi?id=474366
http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.html Patch
http://osvdb.org/40585
http://secunia.com/advisories/26947 Vendor Advisory
http://secunia.com/advisories/26987 Vendor Advisory
http://secunia.com/advisories/27272 Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200710-17.xml
http://www.novell.com/linux/security/advisories/2007_19_sr.html
http://www.securityfocus.com/bid/25777 Patch
http://www.vupen.com/english/advisories/2007/3263
https://bugzilla.redhat.com/show_bug.cgi?id=297581
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnome:balsa:1.1.7:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:1.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.0.10:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.0.16:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.0.17:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.0.18:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.1.90:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.1.91:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.2.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.2.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.2.5:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.2.6:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.5:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.6:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.7:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.8:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.10:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.11:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.12:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.13:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.14:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.15:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.16:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.17:*:*:*:*:*:*:*
cpe:2.3:a:gnome:balsa:2.3.19:*:*:*:*:*:*:*
History

21 Nov 2024, 00:36

Type Values Removed Values Added
References () http://bugs.gentoo.org/show_bug.cgi?id=193179 - Exploit () http://bugs.gentoo.org/show_bug.cgi?id=193179 - Exploit
References () http://bugzilla.gnome.org/show_bug.cgi?id=474366 - () http://bugzilla.gnome.org/show_bug.cgi?id=474366 -
References () http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.html - Patch () http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.html - Patch
References () http://osvdb.org/40585 - () http://osvdb.org/40585 -
References () http://secunia.com/advisories/26947 - Vendor Advisory () http://secunia.com/advisories/26947 - Vendor Advisory
References () http://secunia.com/advisories/26987 - Vendor Advisory () http://secunia.com/advisories/26987 - Vendor Advisory
References () http://secunia.com/advisories/27272 - Vendor Advisory () http://secunia.com/advisories/27272 - Vendor Advisory
References () http://www.gentoo.org/security/en/glsa/glsa-200710-17.xml - () http://www.gentoo.org/security/en/glsa/glsa-200710-17.xml -
References () http://www.novell.com/linux/security/advisories/2007_19_sr.html - () http://www.novell.com/linux/security/advisories/2007_19_sr.html -
References () http://www.securityfocus.com/bid/25777 - Patch () http://www.securityfocus.com/bid/25777 - Patch
References () http://www.vupen.com/english/advisories/2007/3263 - () http://www.vupen.com/english/advisories/2007/3263 -
References () https://bugzilla.redhat.com/show_bug.cgi?id=297581 - () https://bugzilla.redhat.com/show_bug.cgi?id=297581 -
Information

Published : 2007-12-12 22:10

Updated : 2024-11-21 00:36

NVD link : CVE-2007-5007

Mitre link : CVE-2007-5007

CVE.ORG link : CVE-2007-5007

JSON object : View

Products Affected

gnome

  • balsa
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer