ID CVE-2003-0300
Summary The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:outlook_express:6.00.2800.1106:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:outlook_express:6.00.2800.1106:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*
  • cpe:2.3:a:mutt:mutt:1.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:mutt:mutt:1.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:eudora:5.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:qualcomm:eudora:5.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:stuart_parmenter:balsa:2.0.10:*:*:*:*:*:*:*
    cpe:2.3:a:stuart_parmenter:balsa:2.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:sylpheed:sylpheed_email_client:0.8.11:*:*:*:*:*:*:*
    cpe:2.3:a:sylpheed:sylpheed_email_client:0.8.11:*:*:*:*:*:*:*
  • cpe:2.3:a:university_of_washington:pine:4.53:*:*:*:*:*:*:*
    cpe:2.3:a:university_of_washington:pine:4.53:*:*:*:*:*:*:*
  • cpe:2.3:a:ximian:evolution:1.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:ximian:evolution:1.2.4:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 18-10-2016 - 02:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bugtraq 20030514 Buffer overflows in multiple IMAP clients
Last major update 18-10-2016 - 02:32
Published 16-06-2003 - 04:00
Last modified 18-10-2016 - 02:32
Back to Top