CVE-2014-9116 in Mutt
Summary
The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.
Reservation
11/26/2014
Disclosure
12/02/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68290 | Mutt mutt_substrdup memory corruption | 119 | Unproven | Workaround | CVE-2014-9116 |