CVE-2005-0667

CVE	CVE-2005-0667
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2005-03-07 05:00:00 UTC
Updated	2025-04-03 01:03:51 UTC
Description	Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.

Primary CVSS: v2.0 5.1 from [email protected]

AV:N/AC:H/Au:N/C:P/I:P/A:P

Problem Types: NVD-CWE-Other | n/a

Access Vector

Network

Access Complexity

High

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

AV:N/AC:H/Au:N/C:P/I:P/A:P

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Altlinux	Alt Linux	2.3	All	compact	All
Operating System	Altlinux	Alt Linux	2.3	All	junior	All
Operating System	Gentoo	Linux	All	All	All	All
Operating System	Redhat	Enterprise Linux	2.1	All	advanced_server	All
Operating System	Redhat	Enterprise Linux	2.1	All	advanced_server_ia64	All
Operating System	Redhat	Enterprise Linux	2.1	All	enterprise_server	All
Operating System	Redhat	Enterprise Linux	2.1	All	enterprise_server_ia64	All
Operating System	Redhat	Enterprise Linux	2.1	All	workstation	All
Operating System	Redhat	Enterprise Linux	2.1	All	workstation_ia64	All
Operating System	Redhat	Fedora Core	core_3.0	All	All	All
Operating System	Redhat	Linux Advanced Workstation	2.1	All	ia64	All
Operating System	Redhat	Linux Advanced Workstation	2.1	All	itanium_processor	All
Application	Sylpheed	Sylpheed	0.8.11	All	All	All
Application	Sylpheed	Sylpheed	0.9.10	All	All	All
Application	Sylpheed	Sylpheed	0.9.11	All	All	All
Application	Sylpheed	Sylpheed	0.9.12	All	All	All
Application	Sylpheed	Sylpheed	0.9.4	All	All	All
Application	Sylpheed	Sylpheed	0.9.5	All	All	All
Application	Sylpheed	Sylpheed	0.9.6	All	All	All
Application	Sylpheed	Sylpheed	0.9.7	All	All	All
Application	Sylpheed	Sylpheed	0.9.8	All	All	All
Application	Sylpheed	Sylpheed	0.9.9	All	All	All
Application	Sylpheed	Sylpheed	0.9.99	All	All	All
Application	Sylpheed	Sylpheed	1.0.0	All	All	All
Application	Sylpheed	Sylpheed	1.0.1	All	All	All
Application	Sylpheed	Sylpheed	1.0.2	All	All	All
Application	Sylpheed-claws	Sylpheed-claws	1.0.2	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

Reference	Source	Link	Tags
Sylpheed - a GTK+ based, lightweight, and fast e-mail client	af854a3a-2127-422b-91ae-364da2661108	sylpheed.good-day.net	Patch, Vendor Advisory
SecurityTracker.com Archives - Sylpheed Buffer Overflow in Processing Message Headers May Let Remote Users Execute Arbitrary Code	af854a3a-2127-422b-91ae-364da2661108	securitytracker.com	Vendor Advisory
rhn.redhat.com \| Red Hat Support	af854a3a-2127-422b-91ae-364da2661108	www.redhat.com	Patch, Vendor Advisory
Secunia - Advisories - Sylpheed Message Reply Buffer Overflow Vulnerability	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Patch, Vendor Advisory
Sylpheed - a GTK+ based, lightweight, and fast e-mail client	af854a3a-2127-422b-91ae-364da2661108	sylpheed.good-day.net	Patch, Vendor Advisory
Gentoo Linux Documentation -- Sylpheed, Sylpheed-claws: Message reply overflow	af854a3a-2127-422b-91ae-364da2661108	www.gentoo.org	Patch, Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.