Buffer Overflow Vulnerability in Mutt Email Client
CVE-2014-0467

Currently unrated

Key Information:

Vendor: Mutt
Status: Mutt
Vendor: CVE Published:; 14 March 2014

What is CVE-2014-0467?

The vulnerability in Mutt arises due to a buffer overflow in the copy.c module, which can be exploited by remote attackers to cause a denial of service. This is achieved by sending specially crafted RFC2047 header lines that lead to a crash in the email client, creating potential disruptions for users. It is advisable for organizations using Mutt to update to version 1.5.23 or later to mitigate this issue.

References

http://www.debian.org/security/2014/dsa-2874

vendor-advisoryx_refsource_DEBIAN

http://www.ubuntu.com/usn/USN-2147-1

vendor-advisoryx_refsource_UBUNTU

http://rhn.redhat.com/errata/RHSA-2014-0304.html

vendor-advisoryx_refsource_REDHAT

EPSS Score

5% chance of being exploited in the next 30 days.

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 14, 2014
Vulnerability Reserved
Dec 19, 2013

CVE-2014-0467 Data

JSON