Vulnerability Report

CVE-2007-3257

RCE

Title: Gnome Evolution RCE

RCE

Proof Of Concept

No public PoC currently indexed for CVE-2007-3257.

CWE Category NVD-CWE-noinfo

Published Date Jun 19, 2007

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 6.8 CVSS v2.0

Exploit Probability (EPSS)

3.12%

Vulnerability Summary

CVE-2007-3257: Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.

Impacted Vendors

ximian 1

gnome 1

evolution 1

Reference Links

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc http://bugzilla.gnome.org/show_bug.cgi?id=447414 http://mail.gnome.org/archives/evolution-hackers/2007-June/msg00064.html http://osvdb.org/37489 http://secunia.com/advisories/25765 http://secunia.com/advisories/25766 http://secunia.com/advisories/25774 http://secunia.com/advisories/25777 http://secunia.com/advisories/25793 http://secunia.com/advisories/25798 http://secunia.com/advisories/25843 http://secunia.com/advisories/25880 http://secunia.com/advisories/25894 http://secunia.com/advisories/25906 http://secunia.com/advisories/25958 http://secunia.com/advisories/26083 http://security.gentoo.org/glsa/glsa-200711-04.xml http://www.debian.org/security/2007/dsa-1321 http://www.debian.org/security/2007/dsa-1325 http://www.gentoo.org/security/en/glsa/glsa-200707-03.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:136 http://www.novell.com/linux/security/advisories/2007_14_sr.html http://www.novell.com/linux/security/advisories/2007_42_evolution.html http://www.redhat.com/support/errata/RHSA-2007-0509.html http://www.redhat.com/support/errata/RHSA-2007-0510.html http://www.securityfocus.com/archive/1/471455/100/0/threaded http://www.securityfocus.com/bid/24567 http://www.securitytracker.com/id?1018284 http://www.ubuntu.com/usn/usn-475-1 http://www.vupen.com/english/advisories/2007/2282 https://exchange.xforce.ibmcloud.com/vulnerabilities/34964 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11724 ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc http://bugzilla.gnome.org/show_bug.cgi?id=447414 http://mail.gnome.org/archives/evolution-hackers/2007-June/msg00064.html http://osvdb.org/37489 http://secunia.com/advisories/25765 http://secunia.com/advisories/25766 http://secunia.com/advisories/25774 http://secunia.com/advisories/25777 http://secunia.com/advisories/25793 http://secunia.com/advisories/25798 http://secunia.com/advisories/25843 http://secunia.com/advisories/25880 http://secunia.com/advisories/25894 http://secunia.com/advisories/25906 http://secunia.com/advisories/25958 http://secunia.com/advisories/26083 http://security.gentoo.org/glsa/glsa-200711-04.xml http://www.debian.org/security/2007/dsa-1321 http://www.debian.org/security/2007/dsa-1325 http://www.gentoo.org/security/en/glsa/glsa-200707-03.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:136 http://www.novell.com/linux/security/advisories/2007_14_sr.html http://www.novell.com/linux/security/advisories/2007_42_evolution.html http://www.redhat.com/support/errata/RHSA-2007-0509.html http://www.redhat.com/support/errata/RHSA-2007-0510.html http://www.securityfocus.com/archive/1/471455/100/0/threaded http://www.securityfocus.com/bid/24567 http://www.securitytracker.com/id?1018284 http://www.ubuntu.com/usn/usn-475-1 http://www.vupen.com/english/advisories/2007/2282 https://exchange.xforce.ibmcloud.com/vulnerabilities/34964 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11724

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

6.8

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:M/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2007-3257 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 09, 2025 MODIFIED

Vulnerability data or affected products updated.

June 19, 2007 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.