NVD

Id
67411  
Name
CVE-2005-1686  
Description
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2005-05-20  
Modified Date
2016-10-17  
Seq
2005-1686  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
349229 67411 CVE-2005-1686 20050520 pst.advisory: gedit fun. opensource is god .lol windows  View
349230 67411 CVE-2005-1686 oval:org.mitre.oval:def:1245  View
349231 67411 CVE-2005-1686 oval:org.mitre.oval:def:9845  View
349232 67411 CVE-2005-1686 GLSA-200506-09  View
349233 67411 CVE-2005-1686 DSA-753  View
349234 67411 CVE-2005-1686 SUSE-SA:2005:036  View
349235 67411 CVE-2005-1686 RHSA-2005:499  View
349236 67411 CVE-2005-1686 USN-138-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62142 JVNDB-2005-000344 gedit の不正なファイル名の処理によるフォーマットストリングの脆弱性 gedit には、ファイルのロードが失敗したときに表示されるエラーダイアログのファイル名の処理において、フォーマットストリングの脆弱性が存在します。 CVE-2005-1686 12890 CVE-2005-1686 67411 2.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000344.html 2005-05-24 2011-05-09 View