CVE-2005-1686

published 2005-05-20

CVE-2005-1686: Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers…

Priority P4 16 low 2.6 CVSS 2.0

AV N AC H Au N C N I N A P

EXPLOIT

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	gedit	< gedit 2.10.3-1 (bookworm)	gedit 2.10.3-1 (bookworm)
gnome	gedit	—	—
gnome	gedit	>= 0 < 2.10.3-1	2.10.3-1
gnome	gedit	>= 0 < 2.10.3-1	2.10.3-1
gnome	gedit	>= 0 < 2.10.3-1	2.10.3-1
gnome	gedit	>= 0 < 2.10.3-1	2.10.3-1

CVSS provenance

nvd v2.0 2.6 LOW AV:N/AC:H/Au:N/C:N/I:N/A:P

osv 2.6 LOW

vendor_debian 2.6 LOW

vendor_redhat 2.6 LOW

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.