CVE-2000-0930: David Harris Pegasus Mail

Medium severity, CVSS 5.0. EPSS: 7.7% chance of exploitation in the next 30 days.

Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.

Affected products

• David Harris Pegasus Mail: version 3.12 only

Published 2000-12-19. Last modified 2026-09-23.