CVE-2003-0721

Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.96% chance of exploitation in the next 30 days, 90th percentile

Published

2003-09-12

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=106367213400313&w=2

References

• CVE Record
• NVD entry

Related

• CVE-2003-0720
• CVE-2003-0722
• CVE-2003-0719
• CVE-2003-0723
• CVE-2003-0718
• CVE-2003-0725