CVE-2012-1103

NameCVE-2012-1103
Descriptionemacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not properly quoted in an email reply cna cause the files to be attached to the message.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-2416-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
notmuch (PTS)bullseye0.31.4-2fixed
bookworm0.37-1fixed
sid, trixie0.38.3-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
notmuchsourcesqueeze0.3.1+squeeze1DSA-2416-1
notmuchsource(unstable)0.11.1-1

Search for package or bug name: Reporting problems