Bogofilter » Email Filter : Security Vulnerabilities, CVEs, CVSS score >= 6
Heap-based buffer overflow in bogofilter and bogolexer 0.96.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via words that are longer than the input buffer used by flex.
Max CVSS
7.5
EPSS Score
10.61%
Published
2005-12-31
Updated
2017-07-20
Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "invalid input sequences" that lead to heap corruption when bogofilter or bogolexer converts character sets.
Max CVSS
7.5
EPSS Score
10.61%
Published
2005-12-31
Updated
2018-10-03
2 vulnerabilities found