Frank Denis and Peter Valchev have reported a vulnerability in mutt, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in handler.c when decoding certain e-mail attachments and can potentially be exploited to execute arbitrary code.

Successful exploitation may require that libiconv/gettext is compiled against certain versions of libc.

The vulnerability has been reported in versions 1.4.2 (stable) and 1.5.9 (snapshot).

Solution
Filter e-mail attachments in a gateway.

Provided and/or discovered by
Frank Denis and Peter Valchev

Original Advisory
http://comments.gmane.org/gmane.mail.mutt.devel/8379

Deep Links
Links available to Secunia VIM customers