CVE-2005-1686 Common Vulnerabilities and Exposures

Upstream information

CVE-2005-1686 at MITRE

Description

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.

SUSE information

Overall state of this security issue: Resolved

This issue is currently not rated by SUSE as it is not affecting the SUSE Enterprise products.

CVSS v2 Scores
	National Vulnerability Database
Base Score	2.6
Vector	AV:N/AC:H/Au:N/C:N/I:N/A:P
Access Vector	Network
Access Complexity	High
Authentication	None
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Partial

SUSE Bugzilla entry: 90339 [RESOLVED / FIXED]

SUSE Security Advisories:

SUSE-SA:2005:036, published Fri, 24 Jun 2005 12:01:00

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 01:24:09 2013
CVE page last modified: Wed Mar 26 11:15:10 2025