CVE-2016-10034

The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address.

• CWE-77

• http://www.securityfocus.com/bid/95144Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037539
• https://framework.zend.com/security/advisory/ZF2016-04Exploit, Technical Description, Vendor Advisory
• https://legalhackers.com/advisories/ZendFramework-Exploit-ZendMail-Remote-Code-Exec-CVE-2016-10034-Vuln.htmlExploit, Technical Description, Third Party Advisory
• https://security.gentoo.org/glsa/201804-10
• https://www.exploit-db.com/exploits/40979/
• https://www.exploit-db.com/exploits/40986/
• https://www.exploit-db.com/exploits/42221/
• http://www.securityfocus.com/bid/95144Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037539
• https://framework.zend.com/security/advisory/ZF2016-04Exploit, Technical Description, Vendor Advisory
• https://legalhackers.com/advisories/ZendFramework-Exploit-ZendMail-Remote-Code-Exec-CVE-2016-10034-Vuln.htmlExploit, Technical Description, Third Party Advisory
• https://security.gentoo.org/glsa/201804-10
• https://www.exploit-db.com/exploits/40979/
• https://www.exploit-db.com/exploits/40986/
• https://www.exploit-db.com/exploits/42221/

Published

Dec 30, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10028The virgl_cmd_get_capset function in hw/display/virtio-gpu-3…5.5
• CVE-2016-10029The virtio_gpu_set_scanout function in QEMU (aka Quick Emula…5.5
• CVE-2016-1003Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-10030The _prolog_error function in slurmd/req.c in Slurm before 1…
• CVE-2016-10031WampServer 3.0.6 installs two services called 'wampapache' a…
• CVE-2016-10033The mailSend function in the isMail transport in PHPMailer b…9.8
• CVE-2016-10036Unrestricted file upload vulnerability in ui/artifact/upload…
• CVE-2016-10037Directory traversal in /connectors/index.php in MODX Revolut…7.3
• CVE-2016-10038Directory traversal in /connectors/index.php in MODX Revolut…
• CVE-2016-10039Directory traversal in /connectors/index.php in MODX Revolut…7.3
• CVE-2016-1004Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-10040Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 …