CVE-2005-1686
gedit - format string
EPSS 7.7%
描述
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.
如何修補 CVE-2005-1686
要修補 CVE-2005-1686,請將受影響套件升級到下列已修補版本。
- Debian/gedit—升級至 2.10.3-1 或更新版本
- —升級至 2.8.3-4sarge1 或更新版本
CVE-2005-1686 正在被利用嗎?
中等 — EPSS 為 7.7%,可持續追蹤但非最高優先。
受影響套件(2)
- from 0, < 2.10.3-1
- from 0, < 2.8.3-4sarge1