CVE-2003-0140
CVE-2003-0140
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.
EPSS 4.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000626
- http://www.redhat.com/support/errata/RHSA-2003-109.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11583
- http://marc.info/?l=bugtraq&m=105171507629573&w=2
- http://marc.info/?l=bugtraq&m=104817995421439&w=2
- http://marc.info/?l=bugtraq&m=104852190605988&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2
- http://marc.info/?l=bugtraq&m=104818814931378&w=2
- http://www.securityfocus.com/bid/7120
- http://www.gentoo.org/security/en/glsa/glsa-200303-19.xml
- http://www.securityfocus.com/archive/1/315679
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A434
- http://www.coresecurity.com/common/showdoc.php?idx=310&idxseccion=10
- http://www.debian.org/security/2003/dsa-268
- http://www.novell.com/linux/security/advisories/2003_020_mutt.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000630
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:041
- https://nvd.nist.gov/vuln/detail/CVE-2003-0140