The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote malicious users to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
bogofilter email filter 0.92 |
||
bogofilter email filter 0.92.4 |
||
bogofilter email filter 0.9.0.3 |
||
ubuntu ubuntu linux 4.1 |
||
bogofilter email filter 0.92.6 |
||
bogofilter email filter 0.92.7 |
||
bogofilter email filter 0.9.0.4 |
||
bogofilter email filter 0.9.0.5 |
Vulmon