gtk2 vulnerable to Use of Externally-Controlled Format String

보통 6.8CVE-2007-6183 · GHSA-xgj6-pgrm-x4r2 · Published 30/11/2007 · updated 16/06/2026

요약

CVE-2007-6183은(는) gtk2, ruby gnome2 (ruby gnome2)에 영향을 주는 보통 (CVSS 6.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 3.4%, 전체 취약점의 88.9%보다 높음.
조치: 0.17.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
gtk2 RubyGems	`< 0.17.0`	`0.17.0`
ruby gnome2 ruby_gnome2	`= 0.16.0`	No fix yet

Description

Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.

NVD description

Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free