CVEvulnerability

CVE-2008-5660

6.8 MEDIUM Published 2008-12-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-12-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-134

Description

Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2 and 2.x before 2.24.2 might allow remote attackers to execute arbitrary code via format string specifiers in a crafted URI or VNC server response.

Affected configurations

• gnome vinagre 0.5.0 • gnome vinagre 0.5.1 • gnome vinagre 2.23.1 • gnome vinagre 2.23.2 • gnome vinagre 2.23.3 • gnome vinagre 2.23.3.1 • gnome vinagre 2.23.4 • gnome vinagre 2.23.90 • gnome vinagre 2.23.91 • gnome vinagre 2.23.92 • gnome vinagre 2.24.0 • gnome vinagre 2.24.1

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References