CVE-2003-0297: Integer Overflow
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0297?
CVE-2003-0297 is classified as a moderate severity vulnerability due to its potential for denial of service and arbitrary code execution.
How do I fix CVE-2003-0297?
To fix CVE-2003-0297, upgrade to a patched version of the affected software, such as a newer version of IMAP or Pine.
What software is affected by CVE-2003-0297?
CVE-2003-0297 affects University of Washington IMAP 2002b, c-client, and Pine version 4.53.
What types of attacks can exploit CVE-2003-0297?
CVE-2003-0297 can be exploited by remote malicious IMAP servers delivering specially crafted large literal and mailbox size values.
What are the consequences of CVE-2003-0297?
The consequences of CVE-2003-0297 include crashes of the IMAP client and the potential execution of arbitrary code on the user's system.