Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-1686
HistoryMay 20, 2005 - 12:00 a.m.

CVE-2005-1686

2005-05-2000:00:00
ubuntu.com
ubuntu.com
10

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

77.2%

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a
denial of service (application crash) via a bin file with format string
specifiers in the filename. NOTE: while this issue is triggered on the
command line by the gedit user, it has been reported that web browsers and
email clients could be configured to provide a file name as an argument to
gedit, so there is a valid attack that crosses security boundaries.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchgedit< 2.14.2-0ubuntu3UNKNOWN
ubuntu6.10noarchgedit< 2.14.2-0ubuntu3UNKNOWN
ubuntu7.04noarchgedit< 2.14.2-0ubuntu3UNKNOWN

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

77.2%