CVE-2008-3533

CRITICAL 10.0CVE-2008-3533 · Published 18/08/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
gnome gnome	`= 2.20= 2.22`	No fix yet
yelp gnome	`< 2.24`	`2.24`

Description

Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command line, as demonstrated by use of yelp within (1) man or (2) ghelp URI handlers in Firefox, Evolution, and unspecified other programs.

References

bugzilla.gnome.org/attachment.cgi · Exploit
bugzilla.gnome.org/show_bug.cgi · Exploit
lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html · Mailing List
secunia.com/advisories/31465 · Vendor Advisory
secunia.com/advisories/31620 · Vendor Advisory
secunia.com/advisories/31834 · Vendor Advisory
secunia.com/advisories/32629 · Vendor Advisory
mandriva.com/security/advisories · Product
securityfocus.com/bid/30690 · Third Party Advisory
ubuntu.com/usn/usn-638-1 · Third Party Advisory
vupen.com/english/advisories/2008/2393 · Broken Link
bugs.launchpad.net/ubuntu/+source/yelp/+bug/254860 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/44449 · VDB Entry
redhat.com/archives/fedora-package-announce/2008-September/msg00222.html · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free