Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mutt | Mutt | 1.2.1 (including) | 1.2.1 (including) |
| Mutt | Mutt | 1.2.5 (including) | 1.2.5 (including) |
| Mutt | Mutt | 1.2.5.1 (including) | 1.2.5.1 (including) |
| Mutt | Mutt | 1.2.5.4 (including) | 1.2.5.4 (including) |
| Mutt | Mutt | 1.2.5.5 (including) | 1.2.5.5 (including) |
| Mutt | Mutt | 1.2.5.12 (including) | 1.2.5.12 (including) |
| Mutt | Mutt | 1.2.5.12_ol (including) | 1.2.5.12_ol (including) |
| Mutt | Mutt | 1.3.12 (including) | 1.3.12 (including) |
| Mutt | Mutt | 1.3.12.1 (including) | 1.3.12.1 (including) |
| Mutt | Mutt | 1.3.16 (including) | 1.3.16 (including) |
| Mutt | Mutt | 1.3.17 (including) | 1.3.17 (including) |
| Mutt | Mutt | 1.3.22 (including) | 1.3.22 (including) |
| Mutt | Mutt | 1.3.24 (including) | 1.3.24 (including) |
| Mutt | Mutt | 1.3.25 (including) | 1.3.25 (including) |
| Mutt | Mutt | 1.3.27 (including) | 1.3.27 (including) |
| Mutt | Mutt | 1.3.28 (including) | 1.3.28 (including) |
| Mutt | Mutt | 1.4.0 (including) | 1.4.0 (including) |
| Mutt | Mutt | 1.4.1 (including) | 1.4.1 (including) |
| Red Hat Enterprise Linux 3 | RedHat | mutt-5:1.4.1-3.4 | * |
| Red Hat Linux 9 | RedHat | * |