Fluid Attacks Database

Description

Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	sylpheed	>=0 <2.4.5-1	2.4.5-1
debian 11	sylpheed	>=0 <2.4.5-1	2.4.5-1
debian 13	sylpheed	>=0 <2.4.5-1	2.4.5-1

Aliases

1. CVE-2007-29582. NVD-2007-29583. OSV-DEBIAN-2007-29584. OSV-2007-29585. SECURITY-TRACKER-CVE-2007-2958

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.