7.5
CVSSv2

CVE-2003-0140

Published: 24/03/2003 Updated: 11/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa prior to 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.

Vulnerable Product Search on Vulmon Subscribe to Product

mutt mutt 1.3.12

mutt mutt 1.3.16

mutt mutt 1.5.3

mutt mutt 1.3.17

mutt mutt 1.3.22

mutt mutt 1.3.27

mutt mutt 1.4.0

mutt mutt 1.3.24

mutt mutt 1.3.25

Vendor Advisories

Core Security Technologies discovered a buffer overflow in the IMAP code of Mutt, a text-oriented mail reader supporting IMAP, MIME, GPG, PGP and threading This problem allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder For the stable distribution (woo ...