GitHub Advisoryadvisory · RubyGems

GHSA-xgj6-pgrm-x4r2 gtk2 vulnerable to Use of Externally-Controlled Format String

MEDIUM Published 2017-10-24 Modified 2023-01-26 Official page ↗
Aliases
CVE-2007-6183
Ecosystem
RubyGems
Packages
gtk2
Severity
Moderate
Weaknesses
CWE-134
Reviewed
2020-06-16

Affected packages

• RubyGems gtk2: < 0.17.0 → fixed in 0.17.0

Description

Format string vulnerability in the `mdiag_initialize` function in `gtk/src/rbgtkmessagedialog.c` in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.

Related

Alias · CVE (1)

  • CVE-2007-6183 Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and… vulnerability

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References