CVE-2004-0078 Information

Description

Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.

Reference

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt http://bugs.debian.org/126336 http://marc.info/?l=bugtraq&m=107651677817933&w=2 http://marc.info/?l=bugtraq&m=107696262905039&w=2 http://marc.info/?l=bugtraq&m=107884956930903&w=2 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010 http://www.osvdb.org/3918 http://www.redhat.com/support/errata/RHSA-2004-050.html http://www.redhat.com/support/errata/RHSA-2004-051.html http://www.securityfocus.com/bid/9641 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053 https://exchange.xforce.ibmcloud.com/vulnerabilities/15134 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A811 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A838