CVE-2005-1807
EPSS 16.4%
Description
The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service (infinite loop leading to memory and CPU consumption) via a long header field.
How to fix CVE-2005-1807
To remediate CVE-2005-1807, upgrade the affected package to a fixed version below.
- Debian/libphp-phpmailer—upgrade to 1.73 or later
Is CVE-2005-1807 being exploited?
Moderate — EPSS is 16.4%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 1.73