CVE-2004-0078

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-03-03 · updated 2026-06-16

Description

Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.

Affected products

mutt: 1.2.1, 1.2.5, 1.2.5.1, 1.2.5.4, 1.2.5.5, 1.2.5.12 (+12)

References

http://bugs.debian.org/126336
http://marc.info/?l=bugtraq&m=107651677817933&w=2
http://marc.info/?l=bugtraq&m=107696262905039&w=2
http://marc.info/?l=bugtraq&m=107884956930903&w=2
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010
http://www.osvdb.org/3918
http://www.redhat.com/support/errata/RHSA-2004-050.html
http://www.redhat.com/support/errata/RHSA-2004-051.html
http://www.securityfocus.com/bid/9641
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053
https://exchange.xforce.ibmcloud.com/vulnerabilities/15134

Get alerted when CVE-2004-0078 or the next vulnerability affects your stack