Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-2494

Опубликовано: 08 июл. 2010
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:bogofilter:bogofilter:*:*:*:*:*:*:*:*
Версия до 1.2.1 (включая)
cpe:2.3:a:bogofilter:bogofilter:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.1.6:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.1.7:*:*:*:*:*:*:*
cpe:2.3:a:bogofilter:bogofilter:1.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 89%
0.04638
Низкий

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 15 лет назад

Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.

debian
больше 15 лет назад

Multiple buffer underflows in the base64 decoder in base64.c in (1) bo ...

github
больше 3 лет назад

Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.

EPSS

Процентиль: 89%
0.04638
Низкий

5 Medium

CVSS2

Дефекты

CWE-119