Every CVE Search/ Get API key

CVE-2007-3257

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote...

6.8 MediumFix available

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.

Exploit likelihood

3.12%Down 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.

Record
CVE-2007-3257
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.

Record
CVE-2007-3257
Updated
2026-11-02
EUVDEUVD-2007-3247 No score

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.

Record
EUVD-2007-3247
Updated
2026-11-03
GitHub AdvisoriesGHSA-6ggg-vv7h-7mm5 No score

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote...

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.

Record
GHSA-6ggg-vv7h-7mm5
Updated
2026-11-02
OSV No score

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.

Record
CVE-2007-3257
Updated
2026-11-02
OSVDEBIAN-CVE-2007-3257 No score

Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.

Record
DEBIAN-CVE-2007-3257
Updated
2026-11-02
OSVopenSUSE-SU-2024:10744-1 No score

evolution-data-server-3.40.4-1.4 on GA media

These are all security issues fixed in the evolution-data-server-3.40.4-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10744-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
evolution
Debian:12
 before 2.12.0-1
2.12.0-1
evolution
Debian:13
 before 2.12.0-1
2.12.0-1
evolution
Debian:14
 before 2.12.0-1
2.12.0-1
evolution-data-server
Debian:12
 before 1.10.2-2
1.10.2-2
evolution-data-server
Debian:13
 before 1.10.2-2
1.10.2-2
evolution-data-server
Debian:14
 before 1.10.2-2
1.10.2-2
evolution-data-server
Debian:4.0
 before 1.6.3-5etch1, plus listed versions
1.6.3-5
1.6.3-5etch1
evolution
Debian:3.1
 before 2.0.4-2sarge2, plus listed versions
2.0.4-22.0.4-2sarge1
2.0.4-2sarge2
evolution
Debian:4.0
 before 2.6.3-6etch1, plus listed versions
2.6.3-6
2.6.3-6etch1
evolution
Red Hat:enterprise_linux:3::as
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
Show 32 moreShow less
Affected packages
PackageAffectedFixed
evolution-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
evolution-devel
Red Hat:enterprise_linux:3::as
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
evolution
Red Hat:enterprise_linux:3::desktop
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
evolution-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
evolution-devel
Red Hat:enterprise_linux:3::desktop
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
evolution
Red Hat:enterprise_linux:3::es
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
evolution-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
evolution-devel
Red Hat:enterprise_linux:3::es
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
evolution
Red Hat:enterprise_linux:3::ws
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
evolution-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
evolution-devel
Red Hat:enterprise_linux:3::ws
 before 0:1.4.5-21.el3
0:1.4.5-21.el3
evolution
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution-devel
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution-devel
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-35.0.4.el4
0:2.0.2-35.0.4.el4
evolution-data-server
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.8.0-15.0.4.el5
0:1.8.0-15.0.4.el5
evolution-data-server-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.8.0-15.0.4.el5
0:1.8.0-15.0.4.el5
evolution-data-server-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.8.0-15.0.4.el5
0:1.8.0-15.0.4.el5
evolution-data-server
Red Hat:enterprise_linux:5::client
 before 0:1.8.0-15.0.4.el5
0:1.8.0-15.0.4.el5
evolution-data-server-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.8.0-15.0.4.el5
0:1.8.0-15.0.4.el5
evolution-data-server
Red Hat:enterprise_linux:5::server
 before 0:1.8.0-15.0.4.el5
0:1.8.0-15.0.4.el5
evolution-data-server-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.8.0-15.0.4.el5
0:1.8.0-15.0.4.el5
evolution-data-server-devel
Red Hat:enterprise_linux:5::server
 before 0:1.8.0-15.0.4.el5
0:1.8.0-15.0.4.el5
evolution-data-server
openSUSE:Tumbleweed
 before 3.40.4-1.4
3.40.4-1.4

History

History
RecordedChangedSources
aliasesEUVD
aliases
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-3257 is a medium vulnerability (CVSS 6.8) in Gnome Evolution, published June 19, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 87th percentile. Fixed in evolution 2.12.0-1.

References

Show 39 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open