Unrated severityNVD Advisory· Published Jun 16, 2003· Updated Apr 16, 2026

CVE-2003-0297

Description

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.

Affected products

University of Washington/C Client
cpe:2.3:a:university_of_washington:c-client:*:*:*:*:*:*:*:*
University of Washington/Imap 2002b
cpe:2.3:a:university_of_washington:imap-2002b:*:*:*:*:*:*:*:*
University of Washington/Pine
cpe:2.3:a:university_of_washington:pine:4.53:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

marc.infonvd
www.redhat.com/support/errata/RHSA-2005-015.htmlnvd
www.redhat.com/support/errata/RHSA-2005-114.htmlnvd
www.securityfocus.com/archive/1/430302/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000