CVE-2007-2683
Fixed in a distro release EPSS <1%
Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion.
Products: mutt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mutt | 1.5.15+20070608-1 |
| Debian 13 | mutt | 1.5.15+20070608-1 |
| Debian 14 | mutt | 1.5.15+20070608-1 |
| Red Hat Enterprise Linux 3 | mutt | 5:1.4.1-5.el3 |
| Red Hat Enterprise Linux 3 | mutt-debuginfo | 5:1.4.1-5.el3 |
| Red Hat Enterprise Linux 4 | mutt | 5:1.4.1-12.0.3.el4 |
| Red Hat Enterprise Linux 4 | mutt-debuginfo | 5:1.4.1-12.0.3.el4 |
| Red Hat Enterprise Linux 5 | mutt | 5:1.4.2.2-3.0.2.el5 |
| Red Hat Enterprise Linux 5 | mutt-debuginfo | 5:1.4.2.2-3.0.2.el5 |