CVE-2012-4507 | Vulnerability Database | Aqua Security

The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted email.

Affected Software

Name	Vendor	Start Version	End Version
Claws-mail	Claws-mail	3.8.1 (including)	3.8.1 (including)
Claws-mail	Ubuntu	hardy	*
Claws-mail	Ubuntu	lucid	*
Claws-mail	Ubuntu	natty	*
Claws-mail	Ubuntu	oneiric	*
Claws-mail	Ubuntu	precise	*
Claws-mail	Ubuntu	quantal	*
Claws-mail	Ubuntu	raring	*
Claws-mail	Ubuntu	saucy	*
Claws-mail	Ubuntu	upstream	*

References

http://lists.opensuse.org/opensuse-updates/2012-10/msg00064.html
http://www.openwall.com/lists/oss-security/2012/10/09/1
http://www.openwall.com/lists/oss-security/2012/10/09/3
http://www.openwall.com/lists/oss-security/2012/10/10/3
http://www.securityfocus.com/bid/55837
http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2743
https://bugzilla.redhat.com/show_bug.cgi?id=862578

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-4507
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html