CVE-2001-0398: Ritlabs The Bat

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon.

Affected products

• Ritlabs The Bat: version 1.0_build1336 only; version 1.0_build1349 only; version 1.1 only; version 1.011 only; version 1.14 only; version 1.15 only; …

Published 2001-06-18. Last modified 2026-06-16.