📦

gopher

Vendor: golangtc

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 2 Code Available
Total RCEs 0 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 16.47% Exploit Prob.
Latest CVE CVE-2019-9738 Mar 13

Security Vulnerability Index

Page 1 / 1
6.1 CVSS
CVE-2019-9738

jimmykuu Gopher 2.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.

EPSS: 0.87%
7.5 CVSS
CVE-2005-2772
Exploit Found

Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and (2) certain arguments when launching third party programs such as a web browser from a web link, which is not properly handled in the FIOgetargv function.

EPSS: 10.04%
7.2 CVSS
CVE-2005-1853

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.

EPSS: 0.52%
7.5 CVSS
CVE-2002-0371
Exploit Found

Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.

EPSS: 54.44%