CVE-2003-0140: Buffer Overflow

Published Mar 21, 2003

Updated

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.

Affected Software

9 affected components

Mutt Mutt=1.3.27

Mutt Mutt=1.3.16

Mutt Mutt=1.3.25

Mutt Mutt=1.3.22

Mutt Mutt=1.3.24

Mutt Mutt=1.4.0

Mutt Mutt=1.3.17

Mutt Mutt=1.5.3

Mutt Mutt=1.3.12

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Balsa to a version that resolves this vulnerability.
Fixed in 2.0.10

Event History

Mar 21, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Mar 24, 2003

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0140?

CVE-2003-0140 is considered a critical vulnerability due to its potential to allow remote code execution and denial of service.

How do I fix CVE-2003-0140?

To fix CVE-2003-0140, upgrade Mutt to version 1.5.4 or later, or apply the appropriate patches provided by your distribution.

Which versions of Mutt are affected by CVE-2003-0140?

CVE-2003-0140 affects Mutt versions 1.4.0 and earlier, as well as versions 1.5.x up to 1.5.3.

How does CVE-2003-0140 exploit work?

CVE-2003-0140 exploits a buffer overflow vulnerability that allows a crafted folder from an IMAP server to cause a crash or execute arbitrary code.

Is this vulnerability specific to Mutt, or does it affect other programs?

CVE-2003-0140 also affects other programs that utilize Mutt code, such as Balsa before version 2.0.10.