CVE-1999-0004: Buffer Overflow

Published Dec 16, 1997

Updated

MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.

Affected Software

3 affected components

University of Washington pine=4.02

HP Dtmail

SCO UnixWare=7.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove Solaris mailtool from your environment.
Uninstall or disable Solaris mailtool if it is not required; avoid using the affected client until a vendor-provided fix is available.
Remove
Remove Microsoft Outlook from your environment.
Uninstall or disable Microsoft Outlook on affected systems if it is not required; avoid using the affected client until a vendor-provided fix is available.

Event History

Dec 16, 1997

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Feb 4, 2000

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-1999-0004?

CVE-1999-0004 has a high severity due to the potential for remote code execution from a buffer overflow.

How do I fix CVE-1999-0004?

To fix CVE-1999-0004, update your email clients to the latest versions that address this vulnerability.

Which software is affected by CVE-1999-0004?

CVE-1999-0004 affects email clients including HP DTMail, University of Washington PINE version 4.02, and Xinuos UnixWare 7.0.

Can CVE-1999-0004 be exploited remotely?

Yes, CVE-1999-0004 can be exploited remotely through maliciously crafted MIME emails.

What is the impact of exploiting CVE-1999-0004?

Exploiting CVE-1999-0004 may allow an attacker to execute arbitrary code on the affected email client.