Description
Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.
References (20)
Core 20
Core References
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200712-09.xml
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27825
Exploit x_refsource_confirm
http://ruby-gnome2.svn.sourceforge.net/viewvc/ruby-gnome2/ruby-gnome2/trunk/gtk/src/rbgtkmessagedialog.c?view=log
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28022
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/26616
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/484240/100/0/threaded
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00214.html
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=402871
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/3407
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/4022
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00251.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27975
Issue Tracking x_refsource_confirm
http://bugs.gentoo.org/show_bug.cgi?id=200623
Issue Tracking x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453689
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28060
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/40774
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2007/dsa-1431
Various Sources x_refsource_misc
http://em386.blogspot.com/2007/11/your-favorite-better-than-c-scripting.html
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:033
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38757
Scores
EPSS
0.0271
EPSS Percentile
86.1%
Details
CWE
CWE-134
Status
published
Products (2)
ruby_gnome2/ruby_gnome2
0.16.0
rubygems/gtk2
0 - 0.17.0RubyGems
Published
Nov 30, 2007
Tracked Since
Feb 18, 2026