CVE-2013-4479: lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to exec...

Security readout for executives and security teams

Sup, a mail user agent, could be tricked by a malicious email attachment into running commands on the user’s system. The issue is tied to unsafe handling of the attachment content_type field. Fixed releases are 0.13.2.1 and 0.14.1.1. Exposure is limited to environments where the Sup MUA is installed and used to process untrusted email attachments on vulnerable versions. The source bundle does not identify broader affected products or CPEs. Treat as high priority only where Sup is present. The vulnerability permits command execution from malicious email content, but exposure is likely niche and active exploitation is not confirmed by the supplied sources. Mitigation focus: Upgrade Sup to 0.13.2.1, 0.14.1.1, or a vendor-patched package.; Prioritize endpoints or servers where Sup processes untrusted email.; Use Debian or Fedora security packages where applicable..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.