What’s Vulnerable › Vulnerabilities

CVE-2007-3257

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-06-19 · updated 2026-06-16

Description

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.

Affected products

• GNOME Evolution: 1.11

References

• http://bugzilla.gnome.org/show_bug.cgi?id=447414
• http://mail.gnome.org/archives/evolution-hackers/2007-June/msg00064.html
• http://osvdb.org/37489
• http://secunia.com/advisories/25765
• http://secunia.com/advisories/25766
• http://secunia.com/advisories/25774
• http://secunia.com/advisories/25777
• http://secunia.com/advisories/25793
• http://secunia.com/advisories/25798
• http://secunia.com/advisories/25843
• http://secunia.com/advisories/25880

Get alerted when CVE-2007-3257 or the next vulnerability affects your stack