CVE-2007-2958

Fixed in a distro release EPSS 3%

Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies.

Published 2007-08-27 · CVE record · OSV

Products: sylpheed, sylpheed-claws

Distro releases