CVE-2005-3354: Sylpheed

Medium severity, CVSS 5.1. EPSS: 3.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the ldif_get_line function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attackers to execute arbitrary code by having local users import LDIF files with long lines.

Affected products

• Sylpheed Sylpheed: version 0.8.11 only; version 0.9.4 only; version 0.9.5 only; version 0.9.6 only; version 0.9.7 only; version 0.9.8 only; …

Published 2005-11-20. Last modified 2026-06-16.