Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811
https://exchange.xforce.ibmcloud.com/vulnerabilities/15134
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053
http://www.securityfocus.com/bid/9641
http://www.redhat.com/support/errata/RHSA-2004-051.html
http://www.redhat.com/support/errata/RHSA-2004-050.html
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010
http://marc.info/?l=bugtraq&m=107884956930903&w=2
http://marc.info/?l=bugtraq&m=107696262905039&w=2