CVE-2007-5467

CVE-2007-5467 is an integer overflow vulnerability in eXtremail 2.1.1 and earlier, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. The flaw occurs when a long USER command containing "%s" sequences is sent to the POP3 port, leading to an integer overflow during string expansion and subsequent memory corruption via the memmove function. This vulnerability carries a critical CVSS score of 10.0, indicating a network-based attack with low complexity, requiring no authentication, and potentially leading to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, multiple public exploits exist on ExploitDB, demonstrating remote denial of service and heap/stack overflow capabilities, though there is no evidence of active exploitation or significant community discussion.