Unscored severity · published Dec 31, 2005
CVE-2005-4591
Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause…
–
CVSS
5.5%
EPSS
No
On KEV
Description
Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "invalid input sequences" that lead to heap corruption when bogofilter or bogolexer converts character sets.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EF
Email Filter · Bogofilter
0.93.5; 0.94.12; 0.94.14; 0.95.2; 0.96.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4591
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4591
Patch
http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-01
lists.suse.com
http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html
Patch
http://secunia.com/advisories/18352
secunia.com
http://secunia.com/advisories/18427
secunia.com
http://secunia.com/advisories/18717
Patch
http://www.securityfocus.com/bid/16171
More from Email Filter
–
CVE-2005-4592
Heap-based buffer overflow in bogofilter and bogolexer 0.96.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via words that are…
–
CVE-2004-1007
The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF)…