CVE-2007-2683

published 2007-05-15

CVE-2007-2683: Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias…

Priority P4 20 low 3.5 CVSS 2.0

AV L AC H Au S C P I P A P

EXPLOIT

Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	mutt	< mutt 1.5.15+20070608-1 (bookworm)	mutt 1.5.15+20070608-1 (bookworm)
mutt	mutt	—	—
mutt	mutt	>= 0 < 1.5.15+20070608-1	1.5.15+20070608-1
mutt	mutt	>= 0 < 1.5.15+20070608-1	1.5.15+20070608-1
mutt	mutt	>= 0 < 1.5.15+20070608-1	1.5.15+20070608-1
mutt	mutt	>= 0 < 1.5.15+20070608-1	1.5.15+20070608-1

CVSS provenance

nvd v2.0 3.5 LOW AV:L/AC:H/Au:S/C:P/I:P/A:P

osv 3.5 LOW

vendor_debian 3.5 LOW

vendor_redhat 3.5 LOW

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.