CVE-2007-0451

MEDIUM 4.3CVE-2007-0451 · Published 16/02/2007 · updated 16/06/2026

In short

CVE-2007-0451 is a MEDIUM (CVSS 4.3) vulnerability affecting spamassassin (apache).
Chance of exploitation in the next 30 days (EPSS): 6.9%, higher than 94.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
spamassassin apache	`= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.1.0= 3.1.1= 3.1.2≤ 3.1.7`	No fix yet

Description

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

References

fedoranews.org/cms/node/2657 · Patch
fedoranews.org/cms/node/2659 · Patch
osvdb.org/33207
rhn.redhat.com/errata/RHSA-2007-0074.html
secunia.com/advisories/24197 · Vendor Advisory
secunia.com/advisories/24200 · Vendor Advisory
secunia.com/advisories/24250 · Vendor Advisory
secunia.com/advisories/24256 · Vendor Advisory
secunia.com/advisories/24265 · Vendor Advisory
secunia.com/advisories/24307 · Vendor Advisory
secunia.com/advisories/24889 · Vendor Advisory
security.gentoo.org/glsa/glsa-200703-02.xml
spamassassin.apache.org/advisories/cve-2007-0451.txt
svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt

More vulnerabilities in spamassassin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free