CVE ID:	CVE-2014-9116
Description:	The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.
Test IDs:	1.3.6.1.4.1.25623.1.0.869004   1.3.6.1.4.1.25623.1.0.850989   1.3.6.1.4.1.25623.1.0.703083   1.3.6.1.4.1.25623.1.1.13.2015.111.07   1.3.6.1.4.1.25623.1.1.10.2014.0509   1.3.6.1.4.1.25623.1.1.4.2015.0012.1   1.3.6.1.4.1.25623.1.1.12.2014.2440.1   1.3.6.1.4.1.25623.1.0.869007   1.3.6.1.4.1.25623.1.1.1.2.2014.100
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9116 BugTraq ID: 71334 http://www.securityfocus.com/bid/71334 Debian Security Information: DSA-3083 (Google Search) http://www.debian.org/security/2014/dsa-3083 https://security.gentoo.org/glsa/201701-04 http://www.mandriva.com/security/advisories?name=MDVSA-2014:245 http://www.mandriva.com/security/advisories?name=MDVSA-2015:078 http://www.openwall.com/lists/oss-security/2014/11/27/9 http://www.openwall.com/lists/oss-security/2014/11/27/5 http://www.securitytracker.com/id/1031266 SuSE Security Announcement: SUSE-SU-2015:0012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00002.html