CVE-2004-1007: Bogofilter Email Filter

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address.

Affected products

• Bogofilter Email Filter: version 0.9.0.3 only; version 0.9.0.4 only; version 0.9.0.5 only; version 0.92 only; version 0.92.4 only; version 0.92.6 only; …
• Ubuntu Ubuntu Linux: version 4.1 only

Published 2005-03-01. Last modified 2026-06-16.