← back
CVE-2005-2772

CVE-2005-2772

EPSS 10.0%
Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and (2) certain arguments when launching third party programs such as a web browser from a web link, which is not properly handled in the FIOgetargv function.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/1187unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=112559902931614&w=2http://secunia.com/advisories/16614/http://secunia.com/advisories/17016https://exchange.xforce.ibmcloud.com/vulnerabilities/22053http://www.debian.org/security/2005/dsa-832http://www.kb.cert.org/vuls/id/619812http://www.securityfocus.com/bid/14693