The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long "To" header.
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175040