PT-2010-4058 · Bogofilter+1 · Bogofilter+2

Publicado

2010-07-08

·

Atualizado

2013-02-14

·

CVE-2010-2494

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions bogofilter versions prior to 1.2.2 bogolexer versions prior to 1.2.2
Description The issue is related to multiple buffer underflows in the base64 decoder. This can be exploited by remote attackers via an e-mail message containing invalid base64 data that starts with an = (equals) character, leading to a denial of service due to heap memory corruption and application crash.
Recommendations For bogofilter versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue. For bogolexer versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-2494
OPENSUSE-SU-2012_1648-1
OPENSUSE-SU-2012_1650-1
OPENSUSE-SU-2013_0166-1
OPENSUSE-SU-2024:10502-1

Produtos afetados

Suse
Bogofilter
Bogolexer