CVE-2003-0128
Ximian Evolution Mail User Agent <= 1.2.2 - Denial of Service and Possible Remote Code Execution via UUE Header
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-0128. PoCs published by Core Security.
AI-analyzed exploit summary This exploit leverages a maliciously encoded email message to trigger a memory allocation loop in Ximian Evolution, leading to resource exhaustion and a crash. The PoC includes a crafted MIME message with a specific Content-Transfer-Encoding that exploits the vulnerability.
Description
The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malicious uuencoded (UUE) header, possibly triggering a heap-based buffer overflow.
Exploits (1)
This exploit leverages a maliciously encoded email message to trigger a memory allocation loop in Ximian Evolution, leading to resource exhaustion and a crash. The PoC includes a crafted MIME message with a specific Content-Transfer-Encoding that exploits the vulnerability.