CVE-2003-0297

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-06-16 · updated 2026-06-16

Description

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.

Affected products

University Of Washington C-Client: all versions
University Of Washington Imap-2002B: all versions
University Of Washington Pine: 4.53

References

http://marc.info/?l=bugtraq&m=105294024124163&w=2
http://www.redhat.com/support/errata/RHSA-2005-015.html
http://www.redhat.com/support/errata/RHSA-2005-114.html
http://www.securityfocus.com/archive/1/430302/100/0/threaded
http://marc.info/?l=bugtraq&m=105294024124163&w=2
http://www.redhat.com/support/errata/RHSA-2005-015.html
http://www.redhat.com/support/errata/RHSA-2005-114.html
http://www.securityfocus.com/archive/1/430302/100/0/threaded

Get alerted when CVE-2003-0297 or the next vulnerability affects your stack