CVE-2007-5007

Balsa - Stack-based Buffer Overflow via IMAP FETCH Response

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.

References (12)

Core 12
Core References
Exploit x_refsource_confirm
http://bugs.gentoo.org/show_bug.cgi?id=193179
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=297581
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_19_sr.html
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25777
Issue Tracking x_refsource_confirm
http://bugzilla.gnome.org/show_bug.cgi?id=474366
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26987
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3263
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27272
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/40585
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200710-17.xml
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26947

Scores

EPSS 0.0099
EPSS Percentile 77.1%

Details

CWE
CWE-119
Status published
Products (40)
gnome/balsa 1.1.7
gnome/balsa 1.2.4
gnome/balsa 1.4
gnome/balsa 1.4.3
gnome/balsa 2.0.6
gnome/balsa 2.0.10
gnome/balsa 2.0.16
gnome/balsa 2.0.17
gnome/balsa 2.0.18
gnome/balsa 2.1
... and 30 more
Published Dec 12, 2007
Tracked Since Feb 18, 2026