CVE-2005-0687: Hashcash

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header.

Affected products

• Hashcash Hashcash: version 1.14 only; version 1.15 only; version 1.16 only

Published 2005-03-06. Last modified 2026-06-16.