Published: 31/08/2007 Updated: 28/08/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote malicious users to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability than CVE-2007-1029. NOTE: this may have been fixed in version 6.0.3.15.

Vulnerable Product	Search on Vulmon	Subscribe to Product
quicksoft easymail objects
gate comm software postcast server pro 3.0.61

## # $Id: oracle_dc_submittoexpressrb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/cor ...

<!-- Postcast Server Pro 3061 / Quiksoft EasyMail SMTP Object (emsmtpdll 601) remote buffer overflow exploit (ie6 / xp sp2 version) passing more than 539 chars to SubmitToExpress method: EAX 00000400 ECX 0013DD24 ASCII "Error Creating File: AAAA EDX C0403FFF EBX FFFFFFFF ESP 0013D5E4 EBP 0013DD08 ESI 41414141 EDI 0013DD24 AS ...

Make CVE-2007-4607 exploitable again!

CVE-2007-4607 joeyrideoutcom/reworking-decade-old-exploit-code/

CWE-119 http://www.securityfocus.com/bid/25467 http://retrogod.altervista.org/postcast-emsmtp_bof.html http://www.kb.cert.org/vuls/id/281977 http://secunia.com/advisories/24199 http://secunia.com/advisories/26639 http://osvdb.org/38335 http://archives.neohapsis.com/archives/bugtraq/2013-04/0220.html https://exchange.xforce.ibmcloud.com/vulnerabilities/36307 https://www.exploit-db.com/exploits/4328 https://community.ivanti.com/docs/DOC-50988 https://nvd.nist.gov https://github.com/joeyrideout/CVE-2007-4607 https://www.exploit-db.com/exploits/16579/

CVE-2007-4607

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect