Every CVE Search/ Get API key

CVE-2007-6302

Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging...

6.8 Medium

Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CAN-162."

Exploit likelihood

5.60%Down 6.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CAN-162."

Record
CVE-2007-6302
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CAN-162."

Record
CVE-2007-6302
Updated
2026-11-02
EUVDEUVD-2007-6269 No score

Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CAN-162."

Record
EUVD-2007-6269
Updated
2026-11-03
GitHub AdvisoriesGHSA-ch73-wjq9-hx83 No score

Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging...

Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CAN-162."

Record
GHSA-ch73-wjq9-hx83
Weakness
CWE-119
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
aliases, references, titleGitHub Advisories
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6302 is a medium vulnerability (CVSS 6.8) in Novell Netmail, published December 10, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.60%, the 92nd percentile. No source names a fixed version.

References

Show 5 moreShow less
MoveEnter Open