CVE-2003-0721

Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an…

mitre·CWE-129·Published 2003-09-12

CVSS

—

EPSS

0.04

KEV

Exploits

Vendor statements (2)

redhat.com
redhat.com

cve.orgen

210 chars

Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number.

NVDes

237 chars

Error de falta de signo de entero en rfc2231_get_param de strings.c en PINE anteriores a 4.58 permite a atacantes remotos ejecutar mediante un correo electrónico que causa un acceso fuera de límites de un array usando un número negativo.

CVE-2003-0721

Vendor statements (2)

CVSS metrics across sources