CVE-2009-3838: Pmail Pegasus Mail

High severity, CVSS 9.3. EPSS: 6.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long error message.

Affected products

• Pmail Pegasus Mail: version 4.41 only; version 4.51 only

Published 2009-11-02. Last modified 2026-06-16.