What’s Vulnerable › Vulnerabilities

CVE-2002-2338

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2002-12-31 · updated 2026-06-16
• Weakness: CWE-20

Description

The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.

Affected products

• Mozilla: 0.9.2, 0.9.2.1, 0.9.3, 0.9.4, 0.9.4.1, 0.9.5 (+7)
• Netscape Communicator: 4.0, 4.4, 4.5, 4.06, 4.6, 4.07 (+10)
• Netscape Navigator: 6.0, 6.01, 6.1, 6.2, 6.2.1, 6.2.2

References

• http://bugzilla.mozilla.org/show_bug.cgi?id=144228
• http://mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html
• http://online.securityfocus.com/archive/1/276628
• http://www.iss.net/security_center/static/9343.php
• http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074
• http://www.securityfocus.com/archive/1/276946
• http://www.securityfocus.com/bid/5002
• http://bugzilla.mozilla.org/show_bug.cgi?id=144228
• http://mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html
• http://online.securityfocus.com/archive/1/276628
• http://www.iss.net/security_center/static/9343.php
• http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074

Get alerted when CVE-2002-2338 or the next vulnerability affects your stack