CVE-2014-3618: Buffer Overflow
Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3618?
CVE-2014-3618 has been classified with a high severity due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2014-3618?
To fix CVE-2014-3618, upgrade to a patched version of procmail or a later version of the affected software.
What vulnerability does CVE-2014-3618 address?
CVE-2014-3618 addresses a heap-based buffer overflow vulnerability in the formail component of procmail.
Who is affected by CVE-2014-3618?
Users of procmail version 3.22 and certain versions of Ubuntu Linux are affected by CVE-2014-3618.
What types of attacks could exploit CVE-2014-3618?
CVE-2014-3618 could be exploited by remote attackers via crafted email headers leading to crashes and potential code execution.