CVE-2016-10034
The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 38.4%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address.
- CVSS 3.0
- 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 38.44% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-77
- Affected
- zend/zend framework · zend/zend-mail
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/bid/95144Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037539
- https://framework.zend.com/security/advisory/ZF2016-04Exploit, Technical Description, Vendor Advisory
- https://legalhackers.com/advisories/ZendFramework-Exploit-ZendMail-Remote-Code-Exec-CVE-2016-10034-Vuln.htmlExploit, Technical Description, Third Party Advisory
- https://security.gentoo.org/glsa/201804-10
- https://www.exploit-db.com/exploits/40979/
- https://www.exploit-db.com/exploits/40986/
- https://www.exploit-db.com/exploits/42221/
- http://www.securityfocus.com/bid/95144Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037539
- https://framework.zend.com/security/advisory/ZF2016-04Exploit, Technical Description, Vendor Advisory
- https://legalhackers.com/advisories/ZendFramework-Exploit-ZendMail-Remote-Code-Exec-CVE-2016-10034-Vuln.htmlExploit, Technical Description, Third Party Advisory
- https://security.gentoo.org/glsa/201804-10
- https://www.exploit-db.com/exploits/40979/
- https://www.exploit-db.com/exploits/40986/
- https://www.exploit-db.com/exploits/42221/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.