What’s Vulnerable › Vulnerabilities

CVE-2003-0167

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2003-04-02 · updated 2026-06-16

Description

Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than CVE-2003-0140.

Affected products

• mutt: 1.3.12, 1.3.12.1, 1.3.16, 1.3.17, 1.3.22, 1.3.24 (+3)

References

• http://www.debian.org/security/2003/dsa-274
• http://www.debian.org/security/2003/dsa-300
• http://www.securityfocus.com/bid/7229
• http://www.debian.org/security/2003/dsa-274
• http://www.debian.org/security/2003/dsa-300
• http://www.securityfocus.com/bid/7229

Get alerted when CVE-2003-0167 or the next vulnerability affects your stack