Unrated severityNVD Advisory· Published Aug 27, 2007· Updated Jun 16, 2026
CVE-2007-2958
CVE-2007-2958
Description
Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:sylpheed-claws:sylpheed-claws:1.9.100:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sylpheed-claws:sylpheed-claws:1.9.100:*:*:*:*:*:*:*
- cpe:2.3:a:sylpheed-claws:sylpheed-claws:2.10.0:*:*:*:*:*:*:*
- (no CPE)range: 1.9.100, 2.10.0
- Range: 1.9.100, 2.10.0
Patches
Vulnerability mechanics
References
14- secunia.com/advisories/26550nvdPatchVendor Advisory
- secunia.com/secunia_research/2007-70/advisory/nvdPatchVendor Advisory
- bugs.gentoo.org/show_bug.cginvd
- osvdb.org/40184nvd
- secunia.com/advisories/26610nvd
- secunia.com/advisories/27229nvd
- secunia.com/advisories/27379nvd
- security.gentoo.org/glsa/glsa-200710-29.xmlnvd
- www.novell.com/linux/security/advisories/2007_20_sr.htmlnvd
- www.securityfocus.com/bid/25430nvd
- www.vupen.com/english/advisories/2007/2971nvd
- bugzilla.redhat.com/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/36238nvd
- www.redhat.com/archives/fedora-package-announce/2007-September/msg00077.htmlnvd
News mentions
0No linked articles in our index yet.