Unscored severity · published Aug 31, 2007
CVE-2007-4607
Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows…
–
CVSS
56.4%
EPSS
No
On KEV
Description
Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability than CVE-2007-1029. NOTE: this may have been fixed in version 6.0.3.15.
Exploitation
Is it being used?
Exploit prediction (EPSS)56.4% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EO
Easymail Objects · Quicksoft
All versions, or not specified · source: NVD
PS
Postcast Server Pro · Gate Comm Software
3.0.61 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4607
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4607
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-04/0220.html
osvdb.org
http://osvdb.org/38335
retrogod.altervista.org
http://retrogod.altervista.org/postcast-emsmtp_bof.html
secunia.com
http://secunia.com/advisories/24199
secunia.com
http://secunia.com/advisories/26639
US Government Resource
http://www.kb.cert.org/vuls/id/281977