CVE-2007-6302: Buffer Overflow

Published Dec 10, 2007

Updated

Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CAN-162."

Affected Software

6 affected components

Novell Netmail=3.5.2-a

Novell Netmail=3.5.2-b

Novell Netmail=3.5.2-c

Novell Netmail=3.5.2-c1

Novell Netmail=3.5.2-d

Novell Netmail=3.5.2-e-ftfl

Remediation

Patch Available

http://secunia.com/advisories/27974

Event History

Dec 10, 2007

CVE Published

07:46 PM

Dec 11, 2007

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-6302?

CVE-2007-6302 is considered critical due to its potential for remote code execution.

How do I fix CVE-2007-6302?

To mitigate CVE-2007-6302, it is essential to upgrade to Novell NetMail version 3.5.2f or later.

What causes CVE-2007-6302?

CVE-2007-6302 is caused by multiple heap-based buffer overflows in avirus.exe that arise from improper memory allocation.

Who is affected by CVE-2007-6302?

CVE-2007-6302 affects Novell NetMail versions 3.5.2 before Messaging Architects M+NetMail 3.52f.

Can CVE-2007-6302 be exploited remotely?

Yes, CVE-2007-6302 allows remote attackers to execute arbitrary code, making it highly exploitable.