CVE-2007-0221 — Integer Overflow or Wraparound in Microsoft Exchange Server

CWE-190 — Integer Overflow or Wraparound7 documents4 sources
Severity
7.8HIGHNVD
EPSS
65.0%
top 1.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Exchange Server
Timeline
PublishedMay 8
Latest updateMay 1

Description

Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

Patches

Patch: labs.idefense.com ↗Patch: secunia.com ↗Patch: www.securitytracker.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-g5ff-82hw-j5f8: Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang)↗2022-05-01
▶
CVEList
CVE-2007-0221: Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang)↗2007-05-08
▶

💬Community

4
Bugzilla
CVE-2007-6637 Flash Player content injection flaw↗2008-04-04
▶
Bugzilla
CVE-2007-6019 Flash Player input validation error↗2008-04-04
▶
Bugzilla
CVE-2007-0071 Flash Player input validation error↗2008-04-04
▶
Bugzilla
CVE-2007-6243 Flash Player cross-domain and cross-site scripting flaws↗2008-04-04
▶
CVE-2007-0221 — Integer Overflow or Wraparound | cvebase