CVE-2003-0298: Mozilla

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large (1) literal and possibly (2) mailbox size values that cause either integer signedness errors or integer overflow errors.

Affected products

• Mozilla Mozilla: version 1.3 only; version 1.4 only

Published 2003-06-16. Last modified 2026-06-16.