Lucene search

K
nvd[email protected]NVD:CVE-2005-1686
HistoryMay 20, 2005 - 4:00 a.m.

CVE-2005-1686

2005-05-2004:00:00
web.nvd.nist.gov

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.5%

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.

Affected configurations

NVD
Node
gnomegeditMatch2.10.2

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.5%