PT-2005-1709 · Sylpheed · Sylpheed

Publicado 2005-03-07 · Atualizado 2008-09-05 · CVE-2005-0667

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sylpheed versions prior to 1.0.3 Sylpheed versions prior to 1.9.5

Description The issue allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.

Recommendations For versions prior to 1.0.3, update to version 1.0.3 or later. For versions prior to 1.9.5, update to version 1.9.5 or later.

Correção

Identificadores relacionados

CVE-2005-0667

Produtos afetados

Sylpheed

Referências · 10

• http://secunia.com/advisories/14491 · Aviso do Fabricante
• http://sylpheed.good-day.net/changelog.html.en · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0667 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2005-0667 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2005-303.html · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200503-26.xml · Aviso do Fabricante
• http://securitytracker.com/id?1013376 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0667 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2005-0667 · Aviso do Fabricante
• http://sylpheed.good-day.net/changelog-devel.html.en · Aviso do Fabricante