REDHAT-BUG-1168463: Buffer Overflow
A heap-based buffer overflow flaw was reported in the muttsubstrdup() function in Mutt. Opening a specially-crafted mail message could cause mutt to crash or, potentially, execute arbitrary code.
CVE request:
http://www.openwall.com/lists/oss-security/2014/11/27/5
In testing on Fedora, "set weed=no" had to be set in the user's .muttrc before the issue presented.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1168463?
The severity of REDHAT-BUG-1168463 is classified as high due to the potential for arbitrary code execution.
How do I fix REDHAT-BUG-1168463?
To fix REDHAT-BUG-1168463, update Mutt to the latest version that addresses the heap-based buffer overflow flaw.
What is the impact of REDHAT-BUG-1168463 on Mutt users?
The impact of REDHAT-BUG-1168463 on Mutt users includes the risk of the application crashing or the possibility of arbitrary code execution when opening crafted email messages.
Which versions of Mutt are affected by REDHAT-BUG-1168463?
Versions of Mutt prior to the security update addressing REDHAT-BUG-1168463 may be affected by this vulnerability.
What kind of vulnerability is REDHAT-BUG-1168463?
REDHAT-BUG-1168463 is a heap-based buffer overflow vulnerability in the mutt_substrdup() function.