PT-2005-1709 · Sylpheed · Sylpheed

Published 2005-03-07 · Updated 2008-09-05 · CVE-2005-0667

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sylpheed versions prior to 1.0.3 Sylpheed versions prior to 1.9.5

Description The issue allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.

Recommendations For versions prior to 1.0.3, update to version 1.0.3 or later. For versions prior to 1.9.5, update to version 1.9.5 or later.

Fix

Related Identifiers

CVE-2005-0667

Affected Products

Sylpheed

References · 10

• http://secunia.com/advisories/14491 · Vendor Advisory
• http://sylpheed.good-day.net/changelog.html.en · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0667 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0667 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-303.html · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200503-26.xml · Vendor Advisory
• http://securitytracker.com/id?1013376 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0667 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2005-0667 · Vendor Advisory
• http://sylpheed.good-day.net/changelog-devel.html.en · Vendor Advisory