procmail vulnerabilities
4 known CVE vulnerabilities in procmail, translated and rated.
- CVE-2014-3618High
Heap-based buffer overflow in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to 'unbalanced quotes.'
- CVE-2017-16844Critical
A heap-based buffer overflow in the loadbuf function in formisc.c in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message.
- CVE-1999-0439High
Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.
- CVE-1999-0475Low
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.