CVE-2014-3618
HighSummary
Heap-based buffer overflow in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to 'unbalanced quotes.'
Risk Assessment
The organization may experience service outages and the risk of unauthorized code execution, potentially leading to data loss or system compromise.
Recommendation
It is recommended to update procmail to the latest version to mitigate this vulnerability and to monitor systems for suspicious activity.
Other vulnerabilities in procmail 3.22
See all- CVE-2017-16844Critical
A heap-based buffer overflow in the loadbuf function in formisc.c in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message.
- CVE-1999-0439High
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
- CVE-1999-0475Low
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
Original NVD description (English source)
Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."