Buffer overflow in Ipswitch Imail_server
CVE-2007-3925
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
Vulnerability class: Buffer Overflow
EPSS: 0.847 (99.7th percentile) — read the EPSS interpretation.
Affected products
- Ipswitch Imail_server
- Ipswitch Ipswitch_collaboration_suite
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2007-3925?
- CVE-2007-3925 is a vulnerability in Ipswitch Imail_server, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2007-07-21.
- Is CVE-2007-3925 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.