← Back

Sylpheed Claws

sylpheed-claws

Vendor: Sylpheed Claws • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Sylpheed
Sylpheed Claws
2Sylpheed
Sylpheed Claws
Apr 23, 2026
Aug 27, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifi...Show more
Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies.Show less
2Sylpheed
Sylpheed Claws
2Sylpheed
Sylpheed Claws
Apr 16, 2026
Jun 9, 2006
N/A· v4
N/A· v3
2.6 LOW· v2
Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character.
5Altlinux
GentooRedhat+2 more
7Alt Linux
Enterprise LinuxFedora Core+4 more
Apr 16, 2026
Mar 7, 2005
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly...Show more
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.Show less
2Sylpheed
Sylpheed Claws
2Sylpheed
Sylpheed Claws
Apr 16, 2026
Nov 17, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Format string vulnerability in send_message.c for Sylpheed-claws 0.9.4 through 0.9.6 allows remote SMTP servers to cause a denial of service (crash) in sylpheed via format strings in an error message.