Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary…

Description

Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and (2) certain arguments when launching third party programs such as a web browser from a web link, which is not properly handled in the FIOgetargv function.

Scores

EPSS (exploitation in 30 days)

10.0% · top 4.4% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (7)

• 20050901 UMN gopher[v3.0.9+] multiple(2) client buffer overflows. (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• VU#619812 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• DSA-832 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• 14693 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 16614 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 17016 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• umn-gopher-vifromline-bo(22053) (opens in a new tab)vdb-entryx_refsource_XFx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2005-2772](https://trackcve.app/badge/CVE-2005-2772.svg)](https://trackcve.app/cve/CVE-2005-2772)

Record last updated 7 Aug 2024, 22:45 UTC.