CVE-2007-0886

critical

Description

Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via certain base64-encoded data on the pop3 port (110/tcp), which triggers an integer overflow.

References

https://www.exploit-db.com/exploits/3289

https://exchange.xforce.ibmcloud.com/vulnerabilities/32342

http://www.securityfocus.com/bid/22473

http://secunia.com/advisories/24073

http://marc.info/?l=full-disclosure&m=117094708423302&w=2

Details

Source: Mitre, NVD

Published: 2007-02-12

Updated: 2017-10-19

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical