CVE-2005-0667
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers...
CVE-2005-0667 is a medium vulnerability (CVSS 5.1) in Sylpheed, published March 7, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.25%, the 88th percentile. Fixed in sylpheed 1.0.3-1.
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.
- Record
CVE-2005-0667- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.
- Record
CVE-2005-0667- Updated
- 2026-11-02
EUVDEUVD-2005-0668 No score
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.
- Record
EUVD-2005-0668- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-27rr-v6v6-57q8 No score
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers...
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.
- Record
GHSA-27rr-v6v6-57q8- Updated
- 2026-11-02
OSV No score
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.
- Record
CVE-2005-0667- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0667 No score
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.
- Record
DEBIAN-CVE-2005-0667- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
sylpheed.good-day.net/changelog-devel.html.en
securitytracker.com/id?1013376
redhat.com/support/errata/RHSA-2005-303.html
gentoo.org/security/en/glsa/glsa-200503-26.xml
secunia.com/advisories/14491
nvd.nist.gov/vuln/detail/CVE-2005-0667
github.com/advisories/GHSA-27rr-v6v6-57q8
security-tracker.debian.org/tracker/CVE-2005-0667