Patchwire CVEs, their patch status, and feeds to follow them

CVE-2003-0297

Fixed in a distro release EPSS 3%

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.

Published 2003-05-15 · CVE record · OSV

Products: university_of_washington c-client, university_of_washington imap-2002b, university_of_washington pine

Distro releases

ReleasePackageFixed in
Debian 12uw-imap7:2002c