An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
Max CVSS
9.8
EPSS Score
1.37%
Published
2018-07-17
Updated
2020-05-19
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data.
Max CVSS
9.8
EPSS Score
0.95%
Published
2018-07-17
Updated
2020-05-19
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.
Max CVSS
9.8
EPSS Score
0.91%
Published
2018-07-17
Updated
2020-05-20
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.
Max CVSS
9.8
EPSS Score
0.95%
Published
2018-07-17
Updated
2020-05-20
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.
Max CVSS
9.8
EPSS Score
1.25%
Published
2018-07-17
Updated
2020-05-20
5 vulnerabilities found