CVE-2005-0100

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-02-07 · updated 2026-06-16

Description

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Affected products

GNU Emacs: through 20.0; 21.3
GNU Xemacs: through 21.4

References

http://marc.info/?l=bugtraq&m=110780416112719&w=2
http://www.debian.org/security/2005/dsa-670
http://www.debian.org/security/2005/dsa-671
http://www.debian.org/security/2005/dsa-685
http://www.mandriva.com/security/advisories?name=MDKSA-2005:038
http://www.redhat.com/support/errata/RHSA-2005-110.html
http://www.redhat.com/support/errata/RHSA-2005-112.html
http://www.redhat.com/support/errata/RHSA-2005-133.html
http://www.securityfocus.com/archive/1/433928/30/5010/threaded
http://www.securityfocus.com/bid/12462
https://exchange.xforce.ibmcloud.com/vulnerabilities/19246
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9408

Get alerted when CVE-2005-0100 or the next vulnerability affects your stack