CVE-2003-0167
Fixed in a distro release EPSS 3%
Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than CVE-2003-0140.
Products: mutt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | balsa | 2.0.10 |
| Debian 12 | mutt | 1.4.0 |
| Debian 13 | balsa | 2.0.10 |
| Debian 13 | mutt | 1.4.0 |
| Debian 14 | balsa | 2.0.10 |
| Debian 14 | mutt | 1.4.0 |
| Debian 3.0 | balsa | 1.2.4-2.2 |
| Debian 3.0 | mutt | 1.3.28-2.2 |