CVE-2007-2770

Description

Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a long SMTP reply. NOTE: the user must click through a warning about a possible buffer overflow exploit to trigger this issue.

Affected products

• qualcomm / eudora7.1 – 7.1

Exploits & proofs of concept

• exploit-dbEudora 7.1 - SMTP ResponseRemote Remote Buffer Overflowby h07

References

• EXPLOIThttps://www.exploit-db.com/exploits/3934
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/34324
• MISChttp://osvdb.org/36198
• VENDOR_ADVISORYhttp://secunia.com/advisories/25282