CVE-2003-0143 - CVE House
Back to Database
Status published Critical CVE-2003-0143

The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not...

Vulnerability Description

The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0143

Credits & Attribution

No credits recorded in the NVD database.

References

More from qualcomm

View All →
CVE-2019-18991
A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8),...
Medium 6.1
CVE-2017-18301
In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in...
Medium 5.5
CVE-2017-17773
In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD...
Critical 9.8
CVE-2016-10490
In Android before 2018-04-05 or earlier security patch level on...
Critical 9.8
CVE-2014-10031
Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail...
High 7.5

Affected Vendor

Affected Software

qpopper
Vulnerable Versions:
4.0.1, 4.0.2, 4.0.3, 4.0.4

Timeline

Official Publish: September 1st, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.