CVE-2002-1075: David Harris Pegasus Mail

High severity, CVSS 7.5. EPSS: 5.7% chance of exploitation in the next 30 days.

Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers.

Affected products

• David Harris Pegasus Mail: up to and including 4.01

Published 2002-10-04. Last modified 2026-06-16.