NVD

Id
13955  
Name
CVE-2010-2494  
Description
Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-07-08  
Modified Date
2013-02-13  
Seq
2010-2494  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
77261 13955 CVE-2010-2494 http://bogofilter.sourceforge.net/security/bogofilter-SA-2010-01  View
77262 13955 CVE-2010-2494 http://bogofilter.svn.sourceforge.net/viewvc/bogofilter/trunk/bogofilter/doc/bogofilter-SA-2010-01?revision=6909&pathrev=6909  View
77263 13955 CVE-2010-2494 http://bogofilter.svn.sourceforge.net/viewvc/bogofilter/trunk/bogofilter/src/base64.c?view=patch&r1=6906&r2=6903  View
77264 13955 CVE-2010-2494 FEDORA-2010-13139  View
77265 13955 CVE-2010-2494 FEDORA-2010-13154  View
77266 13955 CVE-2010-2494 SUSE-SR:2010:014  View
77267 13955 CVE-2010-2494 openSUSE-SU-2012:1648  View
77268 13955 CVE-2010-2494 openSUSE-SU-2012:1650  View
77269 13955 CVE-2010-2494 openSUSE-SU-2013:0166  View
77270 13955 CVE-2010-2494 [oss-security] 20100705 Request CVE ID for bogofilter base64 decoder  View
77271 13955 CVE-2010-2494 [oss-security] 20100705 Re: Request CVE ID for bogofilter base64 decoder  View
77272 13955 CVE-2010-2494 [oss-security] 20100706 REPOST: CVE request for bogofilter  View
77273 13955 CVE-2010-2494 [oss-security] 20100706 Re: Request CVE ID for bogofilter base64 decoder  View
77274 13955 CVE-2010-2494 41339  View
77275 13955 CVE-2010-2494 USN-980-1  View
77276 13955 CVE-2010-2494 ADV-2010-2233  View
77277 13955 CVE-2010-2494 https://bugzilla.redhat.com/show_bug.cgi?id=611551  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38384 JVNDB-2010-004169 bogofilter の base64.c の base64 デコーダにおけるサービス運用妨害 (DoS) の脆弱性 bogofilter の (1) bogofilter および (2) bogolexer の base64.c の base64 デコーダには、サービス運用妨害 (ヒープメモリ破損およびアプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2010-2494 45074 CVE-2010-2494 13955 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004169.html 2010-07-08 2012-06-26 View