CVE-2003-0297: University Of Washington C-Client

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.

Affected products

• University Of Washington C-Client: any version
• University Of Washington Imap-2002b: any version
• University Of Washington Pine: version 4.53 only

Published 2003-06-16. Last modified 2026-06-16.