Back
CVE-2005-0100
Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.
Published: Feb 7, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (3)
| Vendor | Product | Version |
|---|---|---|
| gnu | emacs | * |
| gnu | emacs | 21.3 |
| gnu | xemacs | * |
GitHub Security Advisory GHSA-39qf-gxpw-7vqf
Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other...
References (24)
- http://marc.info/?l=bugtraq&m=110780416112719&w=2
- http://www.debian.org/security/2005/dsa-670 Patch, Vendor Advisory
- http://www.debian.org/security/2005/dsa-671 Patch, Vendor Advisory
- http://www.debian.org/security/2005/dsa-685 Patch, Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:038
- http://www.redhat.com/support/errata/RHSA-2005-110.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-112.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-133.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/433928/30/5010/threaded
- http://www.securityfocus.com/bid/12462
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19246
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9408
- http://marc.info/?l=bugtraq&m=110780416112719&w=2
- http://www.debian.org/security/2005/dsa-670 Patch, Vendor Advisory
- http://www.debian.org/security/2005/dsa-671 Patch, Vendor Advisory
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
4.36%
Top 10% most likely to be exploited
Threat Score
31.3 / 100
Data Sources
NVD
EPSS
GitHub