CVE-2003-0140

2003-03-2405:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

buffer overflow

mutt

remote code execution

cve-2003-0140

denial of service

7.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.3%

JSON

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.

CPENameOperatorVersion
mutt:muttmutteq1.3.27
mutt:muttmutteq1.3.16
mutt:muttmutteq1.3.25
mutt:muttmutteq1.3.22
mutt:muttmutteq1.3.24
mutt:muttmutteq1.4.0
mutt:muttmutteq1.3.17
mutt:muttmutteq1.5.3
mutt:muttmutteq1.3.12

CPE	Name	Operator	Version
mutt:mutt	mutt	eq	1.3.27
mutt:mutt	mutt	eq	1.3.16
mutt:mutt	mutt	eq	1.3.25
mutt:mutt	mutt	eq	1.3.22
mutt:mutt	mutt	eq	1.3.24
mutt:mutt	mutt	eq	1.4.0
mutt:mutt	mutt	eq	1.3.17
mutt:mutt	mutt	eq	1.5.3
mutt:mutt	mutt	eq	1.3.12