CVE-2003-0721: Washington Pine

High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days.

Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number.

Affected products

• Washington Pine: before 4.58 (fixed in 4.58)

Published 2003-09-17. Last modified 2026-06-16.