A vulnerability has been reported in SpamAssassin, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to the use of an inefficient regular expression in "/SpamAssassin/Message.pm" to parse email headers. This can cause perl to crash when it runs out of stack space and can be exploited via a malicious email that contains a large number of recipients.

The vulnerability has been reported in version 3.0.4. Prior versions may also be affected.

Solution
Update to version 3.1.0.
Further details available to Secunia VIM customers

Provided and/or discovered by
Irina and Mark Martinec.

Original Advisory
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570

Deep Links
Links available to Secunia VIM customers