CVE-2005-4267

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 66.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-21 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7) SELECT, and (8) COPY commands.

Affected products

Qualcomm Worldmail: 3.0

References

http://seclists.org/lists/fulldisclosure/2005/Dec/1037.html
http://secunia.com/advisories/17640
http://securityreason.com/securityalert/277
http://securitytracker.com/id?1015391
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=359
http://www.securityfocus.com/bid/15980
http://www.vupen.com/english/advisories/2005/3005
http://seclists.org/lists/fulldisclosure/2005/Dec/1037.html
http://secunia.com/advisories/17640
http://securityreason.com/securityalert/277
http://securitytracker.com/id?1015391
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=359

Get alerted when CVE-2005-4267 or the next vulnerability affects your stack