What’s Vulnerable › Vulnerabilities

CVE-2007-0451

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-02-16 · updated 2026-06-16
• Weakness: CWE-399

Description

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

Affected products

• Apache Software Foundation Apache SpamAssassin: through 3.1.7; 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.1.0, 3.1.1 (+1)

References

• http://fedoranews.org/cms/node/2657
• http://fedoranews.org/cms/node/2659
• http://osvdb.org/33207
• http://rhn.redhat.com/errata/RHSA-2007-0074.html
• http://secunia.com/advisories/24197
• http://secunia.com/advisories/24200
• http://secunia.com/advisories/24250
• http://secunia.com/advisories/24256
• http://secunia.com/advisories/24265
• http://secunia.com/advisories/24307
• http://secunia.com/advisories/24889
• http://security.gentoo.org/glsa/glsa-200703-02.xml

Get alerted when CVE-2007-0451 or the next vulnerability affects your stack