Description
Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mutt | 1.5.6-20040722+1 | — |
| Debian 13 | mutt | 1.5.6-20040722+1 | — |
| Debian 12 | mutt | 1.5.6-20040722+1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | mutt | 5:1.4.1-3.4 | RHSA-2004:050 |
Advisories 1
- RHSA-2004:050 Red Hat Security Advisory: mutt security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- SSA:2004-043 vendor-advisory
- http://bugs.debian.org/126336
- 20040215 LNSA-#2004-0001: mutt remote crash mailing-list
- RHSA-2004:051 vendor-advisory
- oval:org.mitre.oval:def:811 vdb-entry signature
- mutt-index-menu-bo(15134) vdb-entry
- oval:org.mitre.oval:def:838 vdb-entry signature
- 9641 vdb-entry
- 20040211 Mutt-1.4.2 fixes buffer overflow. mailing-list
- RHSA-2004:050 vendor-advisory
- 20040309 [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt) mailing-list
- 3918 vdb-entry
- MDKSA-2004:010 vendor-advisory