CVE-2003-0966: Elm Development Group Elm

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line.

Affected products

• Elm Development Group Elm: up to and including 2.5.6

Published 2004-02-17. Last modified 2026-06-16.