Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2004-2620: ripMIME can crash when processing malformed email headers

CVE-2004-2620 · published 21 years ago

Summary

The ripMIME program (version 1.3.1.0) does not correctly handle extra line‑break characters in email headers, which can cause it to read memory it shouldn't. This may lead to the program stopping unexpectedly or being manipulated by an attacker. Update to a newer version of ripMIME or apply the vendor's fix to prevent the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
paul_l_daniels	ripmime	1.3.1.0 `cpe:2.3:a:paul_l_daniels:ripmime:1.3.1.0:::::::*`

Original advisory text

The MIMEH_read_headers function in ripMIME 1.3.1.0 does not properly handle trailing "\r" and "\n" characters in headers, which leads to a buffer underflow.

References

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.0 Medium

Exploitation

<1% chance of attack within 30 days

Timeline

Published31 Dec 2004

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2004-2620 · NVD

Track software like this

Free during beta