CVE-2007-3257

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.

🔗 References (64)

• secalert@redhatftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
• secalert@redhathttp://bugzilla.gnome.org/show_bug.cgi?id=447414
• secalert@redhathttp://mail.gnome.org/archives/evolution-hackers/2007-June/msg00064.html
• secalert@redhathttp://osvdb.org/37489
• secalert@redhathttp://secunia.com/advisories/25765
• secalert@redhathttp://secunia.com/advisories/25766
• secalert@redhathttp://secunia.com/advisories/25774
• secalert@redhathttp://secunia.com/advisories/25777
• secalert@redhathttp://secunia.com/advisories/25793
• secalert@redhathttp://secunia.com/advisories/25798
• secalert@redhathttp://secunia.com/advisories/25843
• secalert@redhathttp://secunia.com/advisories/25880
• secalert@redhathttp://secunia.com/advisories/25894
• secalert@redhathttp://secunia.com/advisories/25906
• secalert@redhathttp://secunia.com/advisories/25958