CVE-2004-1007

The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-03-01

Last modified

2024-08-08

Affected products

• Email Filter (Bogofilter)
• Ubuntu Linux (Ubuntu)

References

• http://bogofilter.sourceforge.net/security/bogofilter-SA-2004-01
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17916