Every CVE Search/ Get API key

CVE-2005-0100

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other...

7.5 HighFix available

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Exploit likelihood

4.33%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Record
CVE-2005-0100
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Record
CVE-2005-0100
Updated
2026-11-02
EUVDEUVD-2005-0101 No score

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Record
EUVD-2005-0101
Updated
2026-11-03
GitHub AdvisoriesGHSA-39qf-gxpw-7vqf No score

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other...

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Record
GHSA-39qf-gxpw-7vqf
Updated
2026-11-02
OSV No score

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Record
CVE-2005-0100
Updated
2026-11-02
OSVDEBIAN-CVE-2005-0100 No score

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Record
DEBIAN-CVE-2005-0100
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xemacs21
Debian:12
 before 21.4.16-2
21.4.16-2
emacs20
Debian:3.0
 before 20.7-13.3, plus listed versions
20.7-13.1
20.7-13.3
xemacs21
Debian:3.0
 before 21.4.6-8woody2, plus listed versions
21.4.6-8
21.4.6-8woody2
emacs21
Debian:3.0
 before 21.2-1woody3, plus listed versions
21.2-1
21.2-1woody3
emacs
Red Hat:enterprise_linux:4::as
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-common
Red Hat:enterprise_linux:4::as
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-el
Red Hat:enterprise_linux:4::as
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-leim
Red Hat:enterprise_linux:4::as
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-nox
Red Hat:enterprise_linux:4::as
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
Show 74 moreShow less
Affected packages
PackageAffectedFixed
emacs
Red Hat:enterprise_linux:4::desktop
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-common
Red Hat:enterprise_linux:4::desktop
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-el
Red Hat:enterprise_linux:4::desktop
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-leim
Red Hat:enterprise_linux:4::desktop
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-nox
Red Hat:enterprise_linux:4::desktop
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs
Red Hat:enterprise_linux:4::es
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-common
Red Hat:enterprise_linux:4::es
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-el
Red Hat:enterprise_linux:4::es
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-leim
Red Hat:enterprise_linux:4::es
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-nox
Red Hat:enterprise_linux:4::es
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs
Red Hat:enterprise_linux:4::ws
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-common
Red Hat:enterprise_linux:4::ws
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-el
Red Hat:enterprise_linux:4::ws
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-leim
Red Hat:enterprise_linux:4::ws
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs-nox
Red Hat:enterprise_linux:4::ws
 before 0:21.3-19.EL.1
0:21.3-19.EL.1
emacs
Red Hat:enterprise_linux:3::as
 before 0:21.3-4.1
0:21.3-4.1
emacs-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:21.3-4.1
0:21.3-4.1
emacs-el
Red Hat:enterprise_linux:3::as
 before 0:21.3-4.1
0:21.3-4.1
emacs-leim
Red Hat:enterprise_linux:3::as
 before 0:21.3-4.1
0:21.3-4.1
emacs
Red Hat:enterprise_linux:3::desktop
 before 0:21.3-4.1
0:21.3-4.1
emacs-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:21.3-4.1
0:21.3-4.1
emacs-el
Red Hat:enterprise_linux:3::desktop
 before 0:21.3-4.1
0:21.3-4.1
emacs-leim
Red Hat:enterprise_linux:3::desktop
 before 0:21.3-4.1
0:21.3-4.1
emacs
Red Hat:enterprise_linux:3::es
 before 0:21.3-4.1
0:21.3-4.1
emacs-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:21.3-4.1
0:21.3-4.1
emacs-el
Red Hat:enterprise_linux:3::es
 before 0:21.3-4.1
0:21.3-4.1
emacs-leim
Red Hat:enterprise_linux:3::es
 before 0:21.3-4.1
0:21.3-4.1
emacs
Red Hat:enterprise_linux:3::ws
 before 0:21.3-4.1
0:21.3-4.1
emacs-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:21.3-4.1
0:21.3-4.1
emacs-el
Red Hat:enterprise_linux:3::ws
 before 0:21.3-4.1
0:21.3-4.1
emacs-leim
Red Hat:enterprise_linux:3::ws
 before 0:21.3-4.1
0:21.3-4.1
xemacs
Red Hat:enterprise_linux:4::as
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-common
Red Hat:enterprise_linux:4::as
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-el
Red Hat:enterprise_linux:4::as
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-info
Red Hat:enterprise_linux:4::as
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-nox
Red Hat:enterprise_linux:4::as
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs
Red Hat:enterprise_linux:4::desktop
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-common
Red Hat:enterprise_linux:4::desktop
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-el
Red Hat:enterprise_linux:4::desktop
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-info
Red Hat:enterprise_linux:4::desktop
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-nox
Red Hat:enterprise_linux:4::desktop
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs
Red Hat:enterprise_linux:4::es
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-common
Red Hat:enterprise_linux:4::es
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-el
Red Hat:enterprise_linux:4::es
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-info
Red Hat:enterprise_linux:4::es
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-nox
Red Hat:enterprise_linux:4::es
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs
Red Hat:enterprise_linux:4::ws
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-common
Red Hat:enterprise_linux:4::ws
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-el
Red Hat:enterprise_linux:4::ws
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-info
Red Hat:enterprise_linux:4::ws
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs-nox
Red Hat:enterprise_linux:4::ws
 before 0:21.4.15-10.EL.1
0:21.4.15-10.EL.1
xemacs
Red Hat:enterprise_linux:3::as
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-el
Red Hat:enterprise_linux:3::as
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-info
Red Hat:enterprise_linux:3::as
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs
Red Hat:enterprise_linux:3::desktop
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-el
Red Hat:enterprise_linux:3::desktop
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-info
Red Hat:enterprise_linux:3::desktop
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs
Red Hat:enterprise_linux:3::es
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-el
Red Hat:enterprise_linux:3::es
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-info
Red Hat:enterprise_linux:3::es
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs
Red Hat:enterprise_linux:3::ws
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-el
Red Hat:enterprise_linux:3::ws
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1
xemacs-info
Red Hat:enterprise_linux:3::ws
 before 0:21.4.13-8.ent.1
0:21.4.13-8.ent.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-0100 is a high vulnerability (CVSS 7.5) in Gnu Emacs, published February 7, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.33%, the 91st percentile. Fixed in xemacs21 21.4.16-2.

References

Show 25 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open