The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) via an attachment whose name includes an MS-DOS device name.
| Software | From | Fixed in |
|---|---|---|
| ritlabs / the_bat | 1.53d | 1.53d.x |
| ritlabs / the_bat | 1.54d | 1.54d.x |