VulnerabilityModified

CVE-2007-4607

HIGH 9.3EPSS 56.4%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 56.4%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability than CVE-2007-1029. NOTE: this may have been fixed in version 6.0.3.15.

CVSS 2.0: 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 56.38% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: gate comm software/postcast server pro · quicksoft/easymail objects
Source: cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.