CVE-2007-3257

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote...

6.8 MediumFix available

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.

Exploit likelihood

3.12%Down 1.3 points since Feb 4, 2022

What each source reports

NVD Score used6.8

Record: CVE-2007-3257
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE ListNo score

Record: CVE-2007-3257
Updated: 2026-11-02

EUVDEUVD-2007-3247No score

Record: EUVD-2007-3247
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6ggg-vv7h-7mm5No score

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote...

Record: GHSA-6ggg-vv7h-7mm5
Updated: 2026-11-02

OSVNo score

Record: CVE-2007-3257
Updated: 2026-11-02

OSVDEBIAN-CVE-2007-3257No score

Record: DEBIAN-CVE-2007-3257
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10744-1No score

evolution-data-server-3.40.4-1.4 on GA media

These are all security issues fixed in the evolution-data-server-3.40.4-1.4 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10744-1
Updated: 2026-11-02

Affected products

gnome evolution

Affected packages

Affected packages
Package	Affected	Fixed
`evolution` Debian:12	before 2.12.0-1	2.12.0-1
`evolution` Debian:13	before 2.12.0-1	2.12.0-1
`evolution` Debian:14	before 2.12.0-1	2.12.0-1
`evolution-data-server` Debian:12	before 1.10.2-2	1.10.2-2
`evolution-data-server` Debian:13	before 1.10.2-2	1.10.2-2
`evolution-data-server` Debian:14	before 1.10.2-2	1.10.2-2
`evolution-data-server` Debian:4.0	before 1.6.3-5etch1, plus listed versions 1.6.3-5	1.6.3-5etch1
`evolution` Debian:3.1 From an advisory covering 2 CVEs	before 2.0.4-2sarge2, plus listed versions 2.0.4-22.0.4-2sarge1	2.0.4-2sarge2
`evolution` Debian:4.0 From an advisory covering 2 CVEs	before 2.6.3-6etch1, plus listed versions 2.6.3-6	2.6.3-6etch1
`evolution` Red Hat:enterprise_linux:3::as	before 0:1.4.5-21.el3	0:1.4.5-21.el3

Show 32 moreShow less

Affected packages
Package	Affected	Fixed
`evolution-debuginfo` Red Hat:enterprise_linux:3::as	before 0:1.4.5-21.el3	0:1.4.5-21.el3
`evolution-devel` Red Hat:enterprise_linux:3::as	before 0:1.4.5-21.el3	0:1.4.5-21.el3
`evolution` Red Hat:enterprise_linux:3::desktop	before 0:1.4.5-21.el3	0:1.4.5-21.el3
`evolution-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:1.4.5-21.el3	0:1.4.5-21.el3
`evolution-devel` Red Hat:enterprise_linux:3::desktop	before 0:1.4.5-21.el3	0:1.4.5-21.el3
`evolution` Red Hat:enterprise_linux:3::es	before 0:1.4.5-21.el3	0:1.4.5-21.el3
`evolution-debuginfo` Red Hat:enterprise_linux:3::es	before 0:1.4.5-21.el3	0:1.4.5-21.el3
`evolution-devel` Red Hat:enterprise_linux:3::es	before 0:1.4.5-21.el3	0:1.4.5-21.el3
`evolution` Red Hat:enterprise_linux:3::ws	before 0:1.4.5-21.el3	0:1.4.5-21.el3
`evolution-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:1.4.5-21.el3	0:1.4.5-21.el3
`evolution-devel` Red Hat:enterprise_linux:3::ws	before 0:1.4.5-21.el3	0:1.4.5-21.el3
`evolution` Red Hat:enterprise_linux:4::as	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution-debuginfo` Red Hat:enterprise_linux:4::as	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution-devel` Red Hat:enterprise_linux:4::as	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution` Red Hat:enterprise_linux:4::desktop	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution-devel` Red Hat:enterprise_linux:4::desktop	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution` Red Hat:enterprise_linux:4::es	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution-debuginfo` Red Hat:enterprise_linux:4::es	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution-devel` Red Hat:enterprise_linux:4::es	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution` Red Hat:enterprise_linux:4::ws	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution-devel` Red Hat:enterprise_linux:4::ws	before 0:2.0.2-35.0.4.el4	0:2.0.2-35.0.4.el4
`evolution-data-server` Red Hat:enterprise_linux:5::client_workstation	before 0:1.8.0-15.0.4.el5	0:1.8.0-15.0.4.el5
`evolution-data-server-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:1.8.0-15.0.4.el5	0:1.8.0-15.0.4.el5
`evolution-data-server-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:1.8.0-15.0.4.el5	0:1.8.0-15.0.4.el5
`evolution-data-server` Red Hat:enterprise_linux:5::client	before 0:1.8.0-15.0.4.el5	0:1.8.0-15.0.4.el5
`evolution-data-server-debuginfo` Red Hat:enterprise_linux:5::client	before 0:1.8.0-15.0.4.el5	0:1.8.0-15.0.4.el5
`evolution-data-server` Red Hat:enterprise_linux:5::server	before 0:1.8.0-15.0.4.el5	0:1.8.0-15.0.4.el5
`evolution-data-server-debuginfo` Red Hat:enterprise_linux:5::server	before 0:1.8.0-15.0.4.el5	0:1.8.0-15.0.4.el5
`evolution-data-server-devel` Red Hat:enterprise_linux:5::server	before 0:1.8.0-15.0.4.el5	0:1.8.0-15.0.4.el5
`evolution-data-server` openSUSE:Tumbleweed From an advisory covering 3 CVEs	before 3.40.4-1.4	3.40.4-1.4

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases
Nov 2, 2026	affected, aliases, facts, references, title	GitHub Advisories, OSV
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-3257 is a medium vulnerability (CVSS 6.8) in Gnome Evolution, published June 19, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 88th percentile. Fixed in evolution 2.12.0-1.

References

Show 39 moreShow less