Back to CVE Browser

CVE-2002-1075

HIGH

7.5

CVSS Severity Score

EPSS Score0.1540%

EPSS Percentile42.69th

PublishedOct 4, 2002

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers.

Affected Platforms (CPE)

📦

David Harris

Pegasus Mail

<= 4.01

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2002-07/0277.html

🔗 http://www.iss.net/security_center/static/9673.php

🔗 http://www.securityfocus.com/bid/5302

🔗 http://archives.neohapsis.com/archives/bugtraq/2002-07/0277.html

🔗 http://www.iss.net/security_center/static/9673.php

🔗 http://www.securityfocus.com/bid/5302

Related Vulnerabilities

CVE-2004-251310.0

Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via a long SE...

CVE-2009-38389.3

Stack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial of service...

CVE-2000-09317.5

Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands ...

CVE-2017-90467.3

winpm-32.exe in Pegasus Mail (aka Pmail) v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be installed ...