CVE-2007-5018

MEDIUM 6.0CVE-2007-5018 · Published 20/09/2007 · updated 16/06/2026

In short

CVE-2007-5018 is a MEDIUM (CVSS 6.0) vulnerability affecting mercury 32 (david harris).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mercury 32 david_harris	`= 4.5.2`	No fix yet

Description

Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command. NOTE: this issue might overlap with CVE-2004-1211.

References

osvdb.org/39670
secunia.com/advisories/26878
securityfocus.com/bid/25733 · Exploit
securitytracker.com/id
vupen.com/english/advisories/2007/3224
exploit-db.com/exploits/4429

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free