CVE-2007-4607

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 56%

from disclosure to weapon982 days

Published on NVDAug 31

1st PoC+982d

metasploit+728d

exploitation probability

56%top 1% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability than CVE-2007-1029. NOTE: this may have been fixed in version 6.0.3.15.

Affected products

n/a · n/a

public PoCs found — 3

githubgithub.com/joeyrideout/CVE-2007-4607★ 0 exploitdbwww.exploit-db.com/exploits/16579unverified cve_referencewww.exploit-db.com/exploits/4328unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://archives.neohapsis.com/archives/bugtraq/2013-04/0220.html http://osvdb.org/38335 http://retrogod.altervista.org/postcast-emsmtp_bof.html https://community.ivanti.com/docs/DOC-50988 http://secunia.com/advisories/24199 http://secunia.com/advisories/26639 https://exchange.xforce.ibmcloud.com/vulnerabilities/36307 https://www.exploit-db.com/exploits/4328 http://www.kb.cert.org/vuls/id/281977 http://www.securityfocus.com/bid/25467