← Back

CVE-2008-3533

nvd nist
Published: Aug 18, 2008Modified: Apr 23, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command line, as demonstrated by use of yelp within (1) man or (2) ghelp URI handlers in Firefox, Evolution, and unspecified other programs.

Affected (3)

Products: Gnome: Yelp, Gnome
Gnome
2 products
Yelp
Gnome
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Yelp
Before 2.24
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Gnome
Gnome
Version 2.20
Gnome
Version 2.22

Related CWEs

CWE-134
Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (28)

Source: security@ubuntu.com
ExploitIssue Tracking
Source: security@ubuntu.com
ExploitIssue TrackingPatch
Source: security@ubuntu.com
Mailing ListThird Party Advisory
Source: security@ubuntu.com
Vendor Advisory
Source: security@ubuntu.com
Vendor Advisory
Source: security@ubuntu.com
Vendor Advisory
Source: security@ubuntu.com
Vendor Advisory
Source: security@ubuntu.com
Product
Source: security@ubuntu.com
Third Party AdvisoryVDB Entry
Source: security@ubuntu.com
Third Party Advisory
Source: security@ubuntu.com
Broken Link
Source: security@ubuntu.com
ExploitPatch
Source: security@ubuntu.com
VDB Entry
Source: security@ubuntu.com
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
VDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory

Timeline

No history available yet.