1. CVE-Search
  2. CVE-2012-4507
ID CVE-2012-4507
Summary The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted email. Per: http://cwe.mitre.org/data/definitions/476.html "CWE-476: NULL Pointer Dereference"
References
Vulnerable Configurations
  • cpe:2.3:a:claws-mail:claws-mail:3.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:claws-mail:claws-mail:3.8.1:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 01-03-2013 - 05:00)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 55837
confirm http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2743
misc https://bugzilla.redhat.com/show_bug.cgi?id=862578
mlist
  • [oss-security] 20121009 CVE Request -- claws-mail -- NULL pointer derefence while processing email content.
  • [oss-security] 20121009 Claws-mail security issue in message processing
  • [oss-security] 20121009 Re: CVE Request -- claws-mail -- NULL pointer derefence while processing email content.
suse openSUSE-SU-2012:1374
Last major update 01-03-2013 - 05:00
Published 22-10-2012 - 23:55
Last modified 01-03-2013 - 05:00
Back to Top