GCVE - cpe:2.3:a:mutt:mutt:1.5.10:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mutt:mutt:1.5.10:*:*:*:*:*:*:*

part: a version: 1.5.10 update: *

Vendor	Mutt (`8d049cd7-bc69-5f44-93e6-1dbaf65270ac`)
Product	Mutt (`ed9771c9-1df1-58ed-87e5-c8d9add0ea56`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:bitbucket/mutt/mutt`	purl2cpe	2026-06-01 10:11:48.383320
`pkg:deb/debian/mutt`	purl2cpe	2026-06-01 10:11:48.383322
`pkg:deb/ubuntu/mutt`	purl2cpe	2026-06-01 10:11:48.383323
`pkg:github/muttmua/mutt`	purl2cpe	2026-06-01 10:11:48.383324
`pkg:gitlab/muttmua/mutt`	purl2cpe	2026-06-01 10:11:48.383326
`pkg:rpm/fedora/mutt`	purl2cpe	2026-06-01 10:11:48.383327

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0467`	vulnerable	2026-06-08 05:05:12.900452	Details available Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header line, related to address expansion. Published: 2014-03-14T15:00:00.000Z Updated: 2024-08-06T09:20:17.952Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-2874 http://www.ubuntu.com/usn/USN-2147-1 http://rhn.redhat.com/errata/RHSA-2014-0304.html http://www.securityfocus.com/bid/66165 http://www.mutt.org/doc/devel/ChangeLog	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5298`	vulnerable	2026-06-08 04:49:20.259811	Details available The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls. Published: 2006-10-16T19:00:00.000Z Updated: 2024-08-07T19:48:28.687Z Open on db.gcve.eu Reference links http://marc.info/?l=mutt-dev&m=115999486426292&w=2 http://www.trustix.org/errata/2006/0061/ http://secunia.com/advisories/22640 http://secunia.com/advisories/22613 http://secunia.com/advisories/22685	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5297`	vulnerable	2026-06-08 04:49:20.258796	Details available Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems. Published: 2006-10-16T19:00:00.000Z Updated: 2024-08-07T19:48:29.473Z Open on db.gcve.eu Reference links http://secunia.com/advisories/25529 http://marc.info/?l=mutt-dev&m=115999486426292&w=2 http://www.securityfocus.com/bid/20733 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10601 http://www.trustix.org/errata/2006/0061/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2642`	vulnerable	2026-06-08 04:48:29.993452	Details available Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext. Published: 2005-08-21T04:00:00.000Z Updated: 2024-08-07T22:45:01.313Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/14596 http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-08/0600.html http://online.securityfocus.com/archive/1/408493 http://comments.gmane.org/gmane.mail.mutt.devel/8379 http://online.securityfocus.com/archive/1/408501	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.