Issue Overview:
A heap-based buffer overflow flaw was found in the way mutt processed certain email headers. A remote attacker could use this flaw to send an email with specially crafted headers that, when processed, could cause mutt to crash or, potentially, execute arbitrary code with the permissions of the user running mutt. (CVE-2014-0467)
Affected Packages:
mutt
Issue Correction:
Run yum update mutt to update your system.
New Packages:
i686:
mutt-debuginfo-1.5.20-4.20091214hg736b6a.7.amzn1.i686
mutt-1.5.20-4.20091214hg736b6a.7.amzn1.i686
src:
mutt-1.5.20-4.20091214hg736b6a.7.amzn1.src
x86_64:
mutt-debuginfo-1.5.20-4.20091214hg736b6a.7.amzn1.x86_64
mutt-1.5.20-4.20091214hg736b6a.7.amzn1.x86_64
Red Hat: CVE-2014-0467
Mitre: CVE-2014-0467
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Amazon Linux | 1 | i686 | mutt-debuginfo | < 1.5.20-4.20091214hg736b6a.7.amzn1 | mutt-debuginfo-1.5.20-4.20091214hg736b6a.7.amzn1.i686.rpm |
Amazon Linux | 1 | i686 | mutt | < 1.5.20-4.20091214hg736b6a.7.amzn1 | mutt-1.5.20-4.20091214hg736b6a.7.amzn1.i686.rpm |
Amazon Linux | 1 | x86_64 | mutt-debuginfo | < 1.5.20-4.20091214hg736b6a.7.amzn1 | mutt-debuginfo-1.5.20-4.20091214hg736b6a.7.amzn1.x86_64.rpm |
Amazon Linux | 1 | x86_64 | mutt | < 1.5.20-4.20091214hg736b6a.7.amzn1 | mutt-1.5.20-4.20091214hg736b6a.7.amzn1.x86_64.rpm |