Buffer overflow in Bogofilter

CVE-2010-2494

Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.

Vulnerability class: Buffer Overflow

EPSS: 0.034 (87.8th percentile) — read the EPSS interpretation.