Vulnerability in Altlinux Alt Linux
CVE-2005-0667
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.1 (Medium). Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.032 (87.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 88th percentile — 87.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.032 · newest: 0.032 · change: 0.000
Affected products
- Altlinux Alt Linux — versions 2.3
- Gentoo Linux
- Sylpheed — versions 0.8.11, 0.9.4, 0.9.5
- Sylpheed-Claws — versions 1.0.2
- Red Hat Enterprise Linux — versions 2.1
- Red Hat Fedora Core — versions core_3.0
- Red Hat Linux Advanced Workstation — versions 2.1
References
- sylpheed.good-day.net/changelog-devel.html.en (Patch, Vendor Advisory)
- securitytracker.com/id (vdb-entry, Vendor Advisory)
- www.redhat.com/support/errata/RHSA-2005-303.html (vendor-advisory, Patch, Vendor Advisory)
- www.gentoo.org/security/en/glsa/glsa-200503-26.xml (vendor-advisory, Patch, Vendor Advisory)
- sylpheed.good-day.net/changelog.html.en (Patch, Vendor Advisory)
- secunia.com/advisories/14491 (Patch, Vendor Advisory, third-party-advisory)