Null Pointer Dereference in GNOME Balsa Email Client
CVE-2020-16118

7.5HIGH

Key Information:

Vendor: Gnome
Status: Balsa
Vendor: CVE Published:; 29 July 2020

What is CVE-2020-16118?

In GNOME Balsa prior to version 2.6.0, a vulnerability exists that allows a malicious server operator or a man-in-the-middle attacker to exploit the application. By sending a specially crafted PREAUTH response during the IMAP connection process, this vulnerability can lead to a NULL pointer dereference, which subsequently causes the client to crash. This presents a significant risk to user data and security during email communication.