Severity: Critical
CVSS Score: 9.8
A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.