GCVE - cpe:2.3:a:mutt:mutt:1.4.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mutt:mutt:1.4.2:*:*:*:*:*:*:*

part: a version: 1.4.2 update: *

Vendor	Mutt (`8d049cd7-bc69-5f44-93e6-1dbaf65270ac`)
Product	Mutt (`ed9771c9-1df1-58ed-87e5-c8d9add0ea56`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:bitbucket/mutt/mutt`	purl2cpe	2026-06-01 10:11:48.379746
`pkg:deb/debian/mutt`	purl2cpe	2026-06-01 10:11:48.379748
`pkg:deb/ubuntu/mutt`	purl2cpe	2026-06-01 10:11:48.379749
`pkg:github/muttmua/mutt`	purl2cpe	2026-06-01 10:11:48.379751
`pkg:gitlab/muttmua/mutt`	purl2cpe	2026-06-01 10:11:48.379752
`pkg:rpm/fedora/mutt`	purl2cpe	2026-06-01 10:11:48.379753

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-2683`	vulnerable	2026-06-08 04:49:45.740389	Details available Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion. Published: 2007-05-15T21:00:00.000Z Updated: 2024-08-07T13:49:57.139Z Open on db.gcve.eu Reference links http://secunia.com/advisories/25529 http://www.securitytracker.com/id?1018066 http://www.trustix.org/errata/2007/0024/ http://secunia.com/advisories/26415 http://dev.mutt.org/trac/ticket/2885	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5298`	vulnerable	2026-06-08 04:49:20.259761	Details available The mutt_adv_mktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safe_fopen function calls. Published: 2006-10-16T19:00:00.000Z Updated: 2024-08-07T19:48:28.687Z Open on db.gcve.eu Reference links http://marc.info/?l=mutt-dev&m=115999486426292&w=2 http://www.trustix.org/errata/2006/0061/ http://secunia.com/advisories/22640 http://secunia.com/advisories/22613 http://secunia.com/advisories/22685	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5297`	vulnerable	2026-06-08 04:49:20.257275	Details available Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems. Published: 2006-10-16T19:00:00.000Z Updated: 2024-08-07T19:48:29.473Z Open on db.gcve.eu Reference links http://secunia.com/advisories/25529 http://marc.info/?l=mutt-dev&m=115999486426292&w=2 http://www.securityfocus.com/bid/20733 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10601 http://www.trustix.org/errata/2006/0061/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3242`	vulnerable	2026-06-08 04:49:08.671685	Details available Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long namespaces received from the IMAP server. Published: 2006-06-27T10:00:00.000Z Updated: 2024-08-07T18:23:20.786Z Open on db.gcve.eu Reference links http://secunia.com/advisories/21220 http://www.gentoo.org/security/en/glsa/glsa-200606-27.xml http://secunia.com/advisories/20895 http://secunia.com/advisories/21039 http://dev.mutt.org/cgi-bin/gitweb.cgi?p=mutt/.git%3Ba=commit%3Bh=dc0272b749f0e2b102973b7ac43dbd3908507540	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.