CVE-2012-4507 — Claws-mail vulnerability

5 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
1.2%
top 20.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Claws-mail
Timeline
PublishedOct 22
Latest updateMay 17

Description

The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted email.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶Debianclaws-mail/claws-mail< 3.8.1-2+3

Patches

Patch: www.openwall.com ↗Patch: www.thewildbeast.co.uk ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-6q7r-wpp2-5ggq: The strchr function in procmime↗2022-05-17
▶
CVEList
CVE-2012-4507: The strchr function in procmime↗2012-10-22
▶
OSV
CVE-2012-4507: The strchr function in procmime↗2012-10-22
▶

📋Vendor Advisories

1
Debian
CVE-2012-4507: claws-mail - The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows re...↗2012
▶
CVE-2012-4507 — Claws-mail vulnerability | cvebase