CVE-2006-1520: Libspf

Medium severity, CVSS 6.4. EPSS: 2.5% chance of exploitation in the next 30 days.

Format string vulnerability in ANSI C Sender Policy Framework library (libspf) before 1.0.0-p5, when debugging is enabled, allows remote attackers to execute arbitrary code via format string specifiers, possibly in an e-mail address.

Affected products

• Libspf Libspf: version 1.0.0_p4 only

Published 2006-05-22. Last modified 2026-06-16.