Approved changes feed: RSS · Atom

cpe:2.3:a:mutt:mutt:1.5.3:*:*:*:*:*:*:*

part: a version: 1.5.3 update: *

VendorMutt (8d049cd7-bc69-5f44-93e6-1dbaf65270ac)
ProductMutt (ed9771c9-1df1-58ed-87e5-c8d9add0ea56)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/mutt/mutt purl2cpe 2026-06-01 10:11:48.397386
pkg:deb/debian/mutt purl2cpe 2026-06-01 10:11:48.397388
pkg:deb/ubuntu/mutt purl2cpe 2026-06-01 10:11:48.397389
pkg:github/muttmua/mutt purl2cpe 2026-06-01 10:11:48.397391
pkg:gitlab/muttmua/mutt purl2cpe 2026-06-01 10:11:48.397392
pkg:rpm/fedora/mutt purl2cpe 2026-06-01 10:11:48.397394

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0467 vulnerable 2026-06-08 05:05:12.896627 Details available
Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header line, related to address expansion.
Published: 2014-03-14T15:00:00.000Z
Updated: 2024-08-06T09:20:17.952Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5298 vulnerable 2026-06-08 04:49:20.259795 Details available
The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls.
Published: 2006-10-16T19:00:00.000Z
Updated: 2024-08-07T19:48:28.687Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5297 vulnerable 2026-06-08 04:49:20.258252 Details available
Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.
Published: 2006-10-16T19:00:00.000Z
Updated: 2024-08-07T19:48:29.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0140 vulnerable 2026-06-08 04:47:20.784492 Details available
Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.
Published: 2003-03-21T05:00:00.000Z
Updated: 2024-08-08T01:43:35.807Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.