CVE-2005-2772 - CVE House
Back to Database
Status published High CVE-2005-2772

Multiple stack-based buffer overflows in University of Minnesota gopher client...

Vulnerability Description

Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and (2) certain arguments when launching third party programs such as a web browser from a web link, which is not properly handled in the FIOgetargv function.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2772

Credits & Attribution

No credits recorded in the NVD database.

References

More from university of minnesota

View All →
CVE-2007-4629
Buffer overflow in the processLine function in maptemplate.c in MapServer...
High 7.5
CVE-2007-4542
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow...
Medium 4.3
CVE-2005-1853
gopher.c in the Gopher client 3.0.5 does not properly create...
High 7.2
CVE-2004-0561
Format string vulnerability in the log routine for gopher daemon...
High 7.5
CVE-2004-0560
Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers...
High 7.5

Affected Vendor

university of minnesota

View all reports →

Affected Software

gopher
Vulnerable Versions:
3.0.9

Timeline

Official Publish: September 2nd, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.