← Database

CVE-2007-2958

MEDIUM CVSS: 6.8 Published: 2007-08-27 Modified: 2026-06-16

Description

Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies.

Affected Platforms

Sylpheed-Claws Sylpheed-ClawsSylpheed Sylpheed

Weakness Type

NVD-CWE-Other

References