CVE:CVE-2005-0667
CNNVD:CNNVD-200503-066
Sylpheed 1.0.3之前版本及1.9.5之前的其他版本中存在缓冲区溢出，远程攻击者可以通过带有特定标头的电子邮件信息执行任意代码，这些标头含有用户回复信息时未正确处理的非ASCII字符。
solution:Upgrade sylpheed sylpheed to a higher version than 0.8.11,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.99,1.0.0,1.0.1,1.0.2,and avoid the version 0.8.11,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.99,1.0.0,1.0.1,1.0.2; Upgrade sylpheed-claws sylpheed-claws to a higher version than 1.0.2,and avoid the version 1.0.2; Upgrade altlinux alt_linux to a higher version than 2.3,and avoid the version 2.3; Upgrade gentoo linux to a higher version than *; Upgrade redhat enterprise_linux to a higher version than 2.1,and avoid the version 2.1; Upgrade redhat fedora_core to a higher version than core_3.0,and avoid the version core_3.0; Upgrade redhat linux_advanced_workstation to a higher version than 2.1,and avoid the version 2.1