CVE-2003-0140: Mutt

High severity, CVSS 7.5. EPSS: 4.5% chance of exploitation in the next 30 days.

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.

Affected products

• Mutt Mutt: version 1.3.12 only; version 1.3.16 only; version 1.3.17 only; version 1.3.22 only; version 1.3.24 only; version 1.3.25 only; …

Published 2003-03-24. Last modified 2026-06-16.