NVD

Id
73827  
Name
CVE-2003-0721  
Description
Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2003-09-17  
Modified Date
2016-10-17  
Seq
2003-0721  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
379674 73827 CVE-2003-0721 20030911 Pine: .procmailrc rule against integer overflow  View
379675 73827 CVE-2003-0721 20030911 [slackware-security] security issues in pine (SSA:2003-253-01)  View
379676 73827 CVE-2003-0721 20030915 remote Pine <= 4.56 exploit fully automatic  View
379677 73827 CVE-2003-0721 oval:org.mitre.oval:def:503  View
379678 73827 CVE-2003-0721 20030910 Two Exploitable Overflows in PINE  View
379679 73827 CVE-2003-0721 RHSA-2003:273  View
379680 73827 CVE-2003-0721 RHSA-2003:274  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63543 JVNDB-2003-000269 Pine における不正な MIME ヘッダによる整数オーバーフローの脆弱性 Pine の、 strings.c ファイル内の MIME のパラメータを処理する rfc2231_get_param() 関数には、境界チェックに対するチェックが不適切であるため、 pieces[] 配列に負の整数が引き渡された場合、整数桁あふれによるオーバーフローが発生する脆弱性が存在します。 CVE-2003-0721 7544 CVE-2003-0721 73827 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000269.html 2003-09-10 2007-04-01 View