3.5
CVSSv2

CVE-2007-2683

Published: 15/05/2007 Updated: 11/10/2017
CVSS v2 Base Score: 3.5 | Impact Score: 6.4 | Exploitability Score: 1.5
VMScore: 355
Vector: AV:L/AC:H/Au:S/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion.

Vulnerable Product Search on Vulmon Subscribe to Product

mutt mutt 1.4.2

Vendor Advisories

Debian Bug report logs - #426116 CVE-2007-2683: Buffer overflow in Mutt 142 might allow local users to execute arbitrary code Package: mutt; Maintainer for mutt is Mutt maintainers <mutt@packagesdebianorg>; Source for mutt is src:mutt (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Sat, 2 ...

Exploits

source: wwwsecurityfocuscom/bid/24192/info Mutt is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before using it in a memory copy operation An attacker can exploit this issue to execute arbitrary code with the with the privileges of the victim Failed exploit attempts will r ...