CVE-2018-11780

A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2...

CVE-2018-11780: Improper Control of Generation of Code

A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2...

UBUNTU-CVE-2018-11780

A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2...

PT-2018-1925

Name of the Vulnerable Software and Affected Versions Apache SpamAssassin versions prior to 3.4.2 Description A potential Remote Code Execution issue exists with the PDFInfo plugin in Apache SpamAssassin. The vulnerability is related to errors in code generation management. Exploitation of this...

spamassassin -- multiple vulnerabilities

the Apache Spamassassin project reports: In Apache SpamAssassin, using HTML::Parser, we setup an object and hook into the begin and end tag event handlers In both cases, the "open" event is immediately followed by a "close" event - even if the tag does not close in the HTML being parsed. Because ...