Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2007-2958

Published: 27/08/2007 Updated: 29/07/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Sylpheed-claws

Vulnerability Summary

Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies.

Vulnerable Product Search on Vulmon Subscribe to Product

sylpheed-claws sylpheed-claws 1.9.100

sylpheed-claws sylpheed-claws 2.10.0

sylpheed sylpheed 2.4.4

Vendor Advisories

Debian CVElist Bug Report Logs: CVE-2007-2958 format string vulnerability in inc.c
Debian Bug report logs - #441854 CVE-2007-2958 format string vulnerability in incc Package: sylpheed-claws; Maintainer for sylpheed-claws is (unknown); Reported by: Nico Golde <nion@debianorg> Date: Tue, 11 Sep 2007 13:24:01 UTC Severity: normal Tags: security Found in version sylpheed-claws/105-51 Fixed in version s ...

References

NVD-CWE-Otherhttp://secunia.com/secunia_research/2007-70/advisory/http://secunia.com/advisories/26550https://bugzilla.redhat.com/show_bug.cgi?id=254121http://bugs.gentoo.org/show_bug.cgi?id=190104https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00077.htmlhttp://security.gentoo.org/glsa/glsa-200710-29.xmlhttp://www.novell.com/linux/security/advisories/2007_20_sr.htmlhttp://www.securityfocus.com/bid/25430http://secunia.com/advisories/26610http://secunia.com/advisories/27379http://secunia.com/advisories/27229http://osvdb.org/40184http://www.vupen.com/english/advisories/2007/2971https://exchange.xforce.ibmcloud.com/vulnerabilities/36238https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=441854https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook