8 results · Clear filters · Feed
-
Low 2.5
Use of Out-of-range Pointer Offset in mutt
heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.
-
Low 2.5
mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.
-
Low 3.7
mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.
-
Low 3.7
In mutt before 2.3.2, the imap_auth_gss security level is mishandled.
-
Low 3.7
mutt before 2.3.2 does not check for '\0' in url_pct_decode.
-
Low 3.7
mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.
-
Low 3.7
mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.
-
Low 2.2
Undefined Behavior for Input to API in Mutt
Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12