CVE-2005-2772

CVE-2005-2772 describes multiple stack-based buffer overflows in the University of Minnesota gopher client version 3.0.9. These vulnerabilities allow remote malicious gopher servers to execute arbitrary code on the client system. The issues stem from improper handling of a long "+VIEWS:" reply in the VIfromLine function and certain arguments when launching third-party programs via the FIOgetargv function. This vulnerability is rated with a CVSS score of 7.5 (High), indicating a critical severity. It has a network attack vector, low attack complexity, and requires no authentication, potentially leading to full compromise of confidentiality, integrity, and availability. The EPSS score and FAUCET Risk Score further highlight its significant risk. While not listed on the CISA KEV catalog and showing no active exploitation or significant community discussion, exploit code for the "+VIEWS" buffer overflow is publicly available on ExploitDB. There is no evidence of Metasploit or Nuclei modules for this specific CVE.