Stack-Based Buffer Overflow in SurgeMail IMAP Service by SurgeMail Inc.
CVE-2007-4377
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 22%
What is CVE-2007-4377?
A stack-based buffer overflow exists in the IMAP service of SurgeMail 38k, enabling remote authenticated users to execute arbitrary code by sending overly long arguments to the SEARCH command. This vulnerability could potentially compromise the security of affected systems, allowing unauthorized actions by malicious actors.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.