CVE-2012-4507

Severity

50%

Complexity

99%

Confidentiality

48%

Per: http://cwe.mitre.org/data/definitions/476.html "CWE-476: NULL Pointer Dereference"

The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted email.

Per: http://cwe.mitre.org/data/definitions/476.html "CWE-476: NULL Pointer Dereference"

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

First reported 12 years ago

2012-10-22 23:55:00

Last updated 11 years ago

2013-03-01 05:00:00

Affected Software

Claws Mail (aka claws-mail) 3.8.1

3.8.1

References

openSUSE-SU-2012:1374

[oss-security] 20121009 Claws-mail security issue in message processing

Patch

[oss-security] 20121009 CVE Request -- claws-mail -- NULL pointer derefence while processing email content.

[oss-security] 20121009 Re: CVE Request -- claws-mail -- NULL pointer derefence while processing email content.

55837

http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2743