ubuntu · CVE-2005-4591

Quick triage

Priority: medium Published: 2005-12-31 05:00:00 UTC Updated: 2025-07-17 16:37:16 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2005-4591 medium priority: Ubuntu including 1 source packages (bogofilter), 4 status rows across 4 suites (dapper, edgy, feisty, upstream): released 3, needs-triage 1.

Description:

Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "invalid input sequences" that lead to heap corruption when bogofilter or bogolexer converts character sets.

cvelogic Threat Intelligence