CVE-2012-5468
bogofilter project bogofilter: no CVSS score yet. EPSS 6.3% chance of exploitation in the next 30 days.
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
- EPSS
- 6.3% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bogofilter_project:bogofilter
References
- http://bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
- http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6973
- http://bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6975
- http://secunia.com/advisories/51334
- http://secunia.com/advisories/51521