Skip to content

gtk2 vulnerable to Use of Externally-Controlled Format String

Moderate severity GitHub Reviewed Published Oct 24, 2017 to the GitHub Advisory Database • Updated Nov 5, 2023

Package

bundler gtk2 (RubyGems)

Affected versions

< 0.17.0

Patched versions

0.17.0

Description

Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.

References

Published by the National Vulnerability Database Nov 30, 2007
Published to the GitHub Advisory Database Oct 24, 2017
Reviewed Jun 16, 2020
Last updated Nov 5, 2023

Severity

Moderate

EPSS score

Exploit Prediction Scoring System (EPSS)

This score estimates the probability of this vulnerability being exploited within the next 30 days. Data provided by FIRST.
(83rd percentile)

Weaknesses

CVE ID

CVE-2007-6183

GHSA ID

GHSA-xgj6-pgrm-x4r2

Source code

No known source code
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.