CVE-2007-5094

CVE-2007-5094 describes a heap-based buffer overflow vulnerability in the iaspam.dll component of the SMTP Server in Ipswitch IMail Server versions 8.01 through 8.11. This flaw allows remote attackers to execute arbitrary code by sending a series of specially crafted email messages containing a long boundary parameter in a malformed Content-Type header, a "MIME" string on its own line, and a long Content-Transfer-Encoding header. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing for complete compromise of confidentiality, integrity, and availability (C:P/I:P/A:P) with low attack complexity (AC:L) and no authentication required (Au:N) over the network (AV:N). Its FAUCET Risk Score of 91/100 further emphasizes its critical nature. While not listed in CISA's KEV catalog, an exploit for this vulnerability is publicly available on ExploitDB (EDB-4438). Despite the existence of public exploit code, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.