Vulnerability Details CVE-2004-1007
The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.0%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2004-1007
-
cpe:2.3:o:bogofilter:email_filter:0.9.0.3
-
cpe:2.3:o:bogofilter:email_filter:0.9.0.4
-
cpe:2.3:o:bogofilter:email_filter:0.9.0.5
-
cpe:2.3:o:bogofilter:email_filter:0.92
-
cpe:2.3:o:bogofilter:email_filter:0.92.4
-
cpe:2.3:o:bogofilter:email_filter:0.92.6
-
cpe:2.3:o:bogofilter:email_filter:0.92.7
-
cpe:2.3:o:ubuntu:ubuntu_linux:4.1