PT-2012-5984 · Bogofilter+1 · Bogofilter+1

Jan Lieskovsky · Publicado 2012-12-17 · Atualizado 2017-08-29 · CVE-2012-5468

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Bogofilter versions prior to 1.2.3

Description The issue is related to a heap-based buffer overflow in the iconvert.c file within the bogolexer component. This can be triggered by an email containing a base64 string that decodes to incomplete multibyte characters, potentially allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-5468

DSA-2585-1

OPENSUSE-SU-2024:10502-1

SUSE-SU-2012_1652-1

Produtos afetados

Bogofilter

Suse

Referências · 21

• 🔥 http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6975 · Exploit
• https://lists.suse.com/pipermail/sle-security-updates/2012-December/000314.html · Nota
• https://osv.dev/vulnerability/CVE-2012-5468 · Aviso do Fabricante
• http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5468 · Nota de Segurança
• http://secunia.com/advisories/51334 · Aviso do Fabricante
• http://secunia.com/advisories/51521 · Aviso do Fabricante
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6973 · Correção
• http://support.novell.com/security/cve/CVE-2012-5468.html · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-5468 · Aviso do Fabricante
• http://debian.org/security/2012/dsa-2585 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-5468 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=883358 · Nota
• http://securityfocus.com/bid/56804 · Nota