TAKAHASHI Tamotsu has reported a vulnerability in Mutt, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.

The vulnerability is caused due to a boundary error within the "browse_get_namespace()" function in browse.c. This can be exploited to cause a stack-based buffer overflow when processing an overly long namespace from the IMAP server.

Successful exploitation crashes the application and may allow arbitrary code execution, but requires that the user connects to a malicious IMAP server.

The vulnerability has been reported in version 1.4.2.1. Prior versions may also be affected.

Solution
Update to version 1.4.2.2.
Further details available to Secunia VIM customers

Provided and/or discovered by
TAKAHASHI Tamotsu

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://dev.mutt.org/cgi-bin/gitweb.cgi?p=mutt/.git;a=commit;h=dc0272b749f0e2b102973b7ac43dbd3908507540

Deep Links
Links available to Secunia VIM customers