CVE-2007-5467

CVE-2007-5467 affects eXtremail 2.1.1 and earlier, where an integer overflow in handling a long POP3 USER command with "%%s" sequences can lead to a deny/DoS and possibly arbitrary code execution. The underlying issue is tied to how memmove processes the expanded format string, reportedly related...