CVE-2007-1825

Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

10.38% chance of exploitation in the next 30 days, 95th percentile

Published

2007-04-02

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29807

References

• CVE Record
• NVD entry

Related

• CVE-2007-1819
• CVE-2007-1835
• CVE-2007-1818
• CVE-2007-1837
• CVE-2007-1817
• CVE-2007-1838