CVE-2012-5468

Published: Dec 18, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.

Affected (15)

Products: Bogofilter Project: Bogofilter

Bogofilter Project

1 product

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Bogofilter Project Bogofilter	Up to 1.2.2
Bogofilter Project Bogofilter	Version 1.0.0
Bogofilter Project Bogofilter	Version 1.0.1
Bogofilter Project Bogofilter	Version 1.0.2
Bogofilter Project Bogofilter	Version 1.0.3
Bogofilter Project Bogofilter	Version 1.1.0
Bogofilter Project Bogofilter	Version 1.1.1
Bogofilter Project Bogofilter	Version 1.1.2
Bogofilter Project Bogofilter	Version 1.1.3
Bogofilter Project Bogofilter	Version 1.1.4
Bogofilter Project Bogofilter	Version 1.1.5
Bogofilter Project Bogofilter	Version 1.1.6
Bogofilter Project Bogofilter	Version 1.1.7
Bogofilter Project Bogofilter	Version 1.2.0
Bogofilter Project Bogofilter	Version 1.2.1

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (22)

http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01

Source: cve@mitre.org

PatchVendor Advisory

http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6973

Source: cve@mitre.org

Patch

http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6975

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/51334

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/51521

Source: cve@mitre.org

Vendor Advisory

http://www.debian.org/security/2012/dsa-2585

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2013:064

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2012/12/03/13

Source: cve@mitre.org

http://www.securityfocus.com/bid/56804

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=883358

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/80524

Source: cve@mitre.org

http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6973

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6975

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/51334

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/51521

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.debian.org/security/2012/dsa-2585

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:064

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/12/03/13

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/56804

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=883358

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/80524

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.