Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12
CVSS Score
2.2
EPSS Score
0.0
Published
2023-09-09
Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12
CVSS Score
4.3
EPSS Score
0.001
Published
2023-09-09
Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line
CVSS Score
4.3
EPSS Score
0.002
Published
2022-04-14
Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imap_qresync setting for QRESYNC is not enabled by default.
CVSS Score
9.1
EPSS Score
0.004
Published
2021-05-05
Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766.
CVSS Score
5.8
EPSS Score
0.006
Published
2011-03-16