← Vulnerability feed

Vulnerability record · CVE-2007-1252 · published 3 March 2007

CVE-2007-1252: Symantec mail security vulnerability

Symantec · Mail Security

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources.

9.3 CVSS 2.0 High EPSS 6.8% · top 6.2%
9.3CVSS 2.0 base score
6.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
ftp://ftp.symantec.com/public/english_us_canada/products/symantec_mail_security/5.0_smtp/updates/release_notes_p175.txt
http://osvdb.org/33840
http://secunia.com/advisories/24371 Vendor Advisory
http://www.kb.cert.org/vuls/id/875633 PatchThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/22782 PatchVendor Advisory
http://www.securitytracker.com/id?1017716
http://www.vupen.com/english/advisories/2007/0799
https://exchange.xforce.ibmcloud.com/vulnerabilities/32781
ftp://ftp.symantec.com/public/english_us_canada/products/symantec_mail_security/5.0_smtp/updates/release_notes_p175.txt
http://osvdb.org/33840
http://secunia.com/advisories/24371 Vendor Advisory
http://www.kb.cert.org/vuls/id/875633 PatchThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/22782 PatchVendor Advisory
http://www.securitytracker.com/id?1017716
http://www.vupen.com/english/advisories/2007/0799
https://exchange.xforce.ibmcloud.com/vulnerabilities/32781

Track CVE-2007-1252 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-3032Ibm lotus notes vulnerabilityInteger overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security f…EPSS 3.7%9.3CVE-2011-0548Symantec mail security memory buffer overflow vulnerabilityBuffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security (SMS) 6.x through 8.x, Symante…EPSS 5.1%9.3CVE-2010-0131Autonomy keyview export sdk memory buffer overflow vulnerabilityStack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr.dll), as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and p…EPSS 4.1%9.3CVE-2009-3037Ibm lotus notes memory buffer overflow vulnerabilityBuffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec M…EPSS 5.7%9.3CVE-2008-4564Autonomy keyview export sdk memory buffer overflow vulnerabilityStack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) produ…EPSS 6.8%9.3CVE-2007-5405Activepdf docconverter memory buffer overflow vulnerabilityMultiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lot…EPSS 5.7%9.3CVE-2007-5406Ibm lotus notes vulnerabilitykpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity) KeyView, as used by IBM Lotus Notes, Symantec Mail Secur…EPSS 3.0%9.3CVE-2007-6020Activepdf docconverter memory buffer overflow vulnerabilityMultiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by I…EPSS 5.7%

Source: NIST National Vulnerability Database (record CVE-2007-1252), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.