CVE-2008-3533 Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers....
HighCVSS 10.0
EPSS 19.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command line, as demonstrated by use of yelp within (1) man or (2) ghelp URI handlers in Firefox, Evolution, and unspecified other programs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME yelp | < 2.24 | 2.24 |
| gnome | = 2.20 | No fix listed |
| gnome | = 2.22 | No fix listed |
| debian/yelp(Debian:12) | < 2.22.1-4 | 2.22.1-4 |
| debian/yelp(Debian:13) | < 2.22.1-4 | 2.22.1-4 |
| debian/yelp(Debian:14) | < 2.22.1-4 | 2.22.1-4 |
References
- Debian Security Tracker CVE-2008-3533 vendor-advisory
- bugzilla.gnome.org exploit issue-tracking
- bugzilla.gnome.org exploit issue-tracking patch
- SUSE-SR:2008:024 mailing-list third-party-advisory vendor-advisory
- 31465 third-party-advisory vendor-advisory
- 31620 third-party-advisory vendor-advisory
- 31834 third-party-advisory vendor-advisory
- 32629 third-party-advisory vendor-advisory
- MDVSA-2008:175 product vendor-advisory
- 30690 third-party-advisory vdb-entry
- USN-638-1 third-party-advisory vendor-advisory
- ADV-2008-2393 broken-link vdb-entry
- bugs.launchpad.net exploit patch
- yelp-uri-format-string(44449) vdb-entry
- FEDORA-2008-7293 mailing-list third-party-advisory vendor-advisory