CVE-2005-0100: GNU Emacs

High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Affected products

• GNU Emacs: up to and including 20.0; version 21.3 only
• GNU Xemacs: up to and including 21.4

Published 2005-02-07. Last modified 2026-06-16.