CVE-2005-2772
NoneCVSS
—
EPSS
10.0%
Published
Sep 2, 2005
CISA due date
—
The record
Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and (2) certain arguments when launching third party programs such as a web browser from a web link, which is not properly handled in the FIOgetargv function.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | gopher | 0 | 3.0.11 |
| Debian:11 | gopher | 0 | 3.0.11 |
| Debian:12 | gopher | 0 | 3.0.11 |
| Debian:13 | gopher | 0 | 3.0.11 |
| Debian:3.0 | gopher | 0 | 3.0.3woody4 |
| Debian:3.1 | gopher | 0 | 3.0.7sarge2 |