CVE-2012-5468
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3...
CVE-2012-5468 is a high vulnerability (CVSS 7.5) in Bogofilter Project Bogofilter, published December 11, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.26%, the 93rd percentile. Fixed in bogofilter 1.2.2+dfsg1-2.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 6.26%EPSS, 93rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.2+dfsg1-2bogofilter +3 more
Description
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bogofilterDebian:12 | before 1.2.2+dfsg1-2 | 1.2.2+dfsg1-2 |
bogofilterDebian:13 | before 1.2.2+dfsg1-2 | 1.2.2+dfsg1-2 |
bogofilterDebian:14 | before 1.2.2+dfsg1-2 | 1.2.2+dfsg1-2 |
bogofilterDebian:6.0 | before 1.2.2-2+squeeze1, plus listed versions 1.2.2-2 | 1.2.2-2+squeeze1 |
What each source reports
NVD Score used
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
- Record
CVE-2012-5468- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
- Record
CVE-2012-5468- Updated
- 2026-11-02
EUVDEUVD-2012-5387No score
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
- Record
EUVD-2012-5387- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pv39-69p9-h38rNo score
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3...
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
- Record
GHSA-pv39-69p9-h38r- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
- Record
CVE-2012-5468- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-5468No score
Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an email containing a base64 string that is decoded to incomplete multibyte characters.
- Record
DEBIAN-CVE-2012-5468- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10502-1No score
bogofilter-common-1.2.4-9.6 on GA media
These are all security issues fixed in the bogofilter-common-1.2.4-9.6 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10502-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
mandriva.com/security/advisories?name=MDVSA-2013:064
openwall.com/lists/oss-security/2012/12/03/13
secunia.com/advisories/51521
bogofilter.sourceforge.net/security/bogofilter-SA-2012-01
securityfocus.com/bid/56804
debian.org/security/2012/dsa-2585
Show 10 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=883358
bogofilter.svn.sourceforge.net/viewvc/bogofilter?view=revision&revision=6973
exchange.xforce.ibmcloud.com/vulnerabilities/80524
nvd.nist.gov/vuln/detail/CVE-2012-5468
github.com/advisories/GHSA-pv39-69p9-h38r
security-tracker.debian.org/tracker/CVE-2012-5468
suse.com/security/cve/CVE-2010-2494