CVE-2002-0001: Mutt

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.

Affected products

• Mutt Mutt: up to and including 1.2.5.1; up to and including 1.3.25

Published 2002-02-27. Last modified 2026-06-16.