CVE-2003-0852: Sylpheed

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Format string vulnerability in send_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service (crash) in sylpheed via format strings in an error message.

Affected products

• Sylpheed Sylpheed: version 0.9.4 only; version 0.9.5 only; version 0.9.6 only
• Sylpheed-Claws Sylpheed-Claws: version 0.9.4 only; version 0.9.5 only; version 0.9.6 only

Published 2003-11-17. Last modified 2026-06-16.