1. Home
  2. CVE Database
  3. CVE-2003-0300
MEDIUM · 5.0

CVE-2003-0300

The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integ...

Vulnerability Description

The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
MicrosoftOutlook Express6.00.2800.1106
MozillaMozilla1.3
MuttMutt1.4.1
QualcommEudora5.2.1
Stuart ParmenterBalsa2.0.10
SylpheedSylpheed Email Client0.8.11
University Of WashingtonPine4.53
XimianEvolution1.2.4

References

FAQ

What is CVE-2003-0300?

CVE-2003-0300 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integ...

How severe is CVE-2003-0300?

CVE-2003-0300 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2003-0300?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Outlook Express, Mozilla Mozilla, Mutt Mutt, Qualcomm Eudora, Stuart Parmenter Balsa.