What’s Vulnerable › Vulnerabilities

CVE-2004-1007

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-03-01 · updated 2026-06-16

Description

The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address.

Affected products

• Bogofilter Email Filter: 0.9.0.3, 0.9.0.4, 0.9.0.5, 0.92, 0.92.4, 0.92.6 (+1)
• Ubuntu Linux: 4.1

References

• http://bogofilter.sourceforge.net/security/bogofilter-SA-2004-01
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17916
• http://bogofilter.sourceforge.net/security/bogofilter-SA-2004-01
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17916

Get alerted when CVE-2004-1007 or the next vulnerability affects your stack