CVE

Id
12892  
CVE No.
CVE-2005-1686  
Status
Candidate  
Description
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.  
Phase
Assigned (20050520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
92713 12892 CVE-2005-1686 BUGTRAQ:20050520 pst.advisory: gedit fun. opensource is god .lol windows  View
92714 12892 CVE-2005-1686 URL:http://marc.info/?l=bugtraq&m=111661117701398&w=2  View
92715 12892 CVE-2005-1686 DEBIAN:DSA-753  View
92716 12892 CVE-2005-1686 URL:http://www.debian.org/security/2005/dsa-753  View
92717 12892 CVE-2005-1686 GENTOO:GLSA-200506-09  View
92718 12892 CVE-2005-1686 URL:http://security.gentoo.org/glsa/glsa-200506-09.xml  View
92719 12892 CVE-2005-1686 REDHAT:RHSA-2005:499  View
92720 12892 CVE-2005-1686 URL:http://www.redhat.com/support/errata/RHSA-2005-499.html  View
92721 12892 CVE-2005-1686 SUSE:SUSE-SA:2005:036  View
92722 12892 CVE-2005-1686 URL:http://www.novell.com/linux/security/advisories/2005_36_sudo.html  View
92723 12892 CVE-2005-1686 UBUNTU:USN-138-1  View
92724 12892 CVE-2005-1686 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-138-1  View
92725 12892 CVE-2005-1686 OVAL:oval:org.mitre.oval:def:1245  View
92726 12892 CVE-2005-1686 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1245  View
92727 12892 CVE-2005-1686 OVAL:oval:org.mitre.oval:def:9845  View

Related JVN