CVE-2003-0852: Format string vulnerability in send_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP ser...

Security readout for executives and security teams

CVE-2003-0852 affects old Sylpheed-claws email clients. A malicious or compromised SMTP server could make the client crash by triggering unsafe error-message formatting. The documented impact is denial of service for the user’s mail client, not confirmed system compromise. Exposure is likely limited to environments still running Sylpheed-claws 0.9.4, 0.9.5, or 0.9.6. Modern mail infrastructure is not directly affected; the vulnerable component is the legacy desktop mail client connecting to SMTP servers. Prioritize this as a legacy cleanup item unless affected clients are still in use. Business risk is user-level email disruption, with no source-backed evidence of active exploitation or confirmed code execution in the provided bundle. Mitigation focus: Inventory endpoints for Sylpheed-claws 0.9.4 through 0.9.6.; Upgrade or retire affected Sylpheed-claws clients using vendor guidance.; Avoid using affected clients with untrusted or unmanaged SMTP servers..

Prepared

Jun 30, 2026, 08:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.