NetSight
IP …
medium6.8Public exploit code

CVE-2008-5660

Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2 and 2.x before 2.24.2 might allow remo…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2 and 2.x before 2.24.2 might allow remote attackers to execute arbitrary code via format string specifiers in a crafted URI or VNC server response.

Affected products

VendorProductAffected versions
GnomeVinagre
Versions 0.5.0, 0.5.1, 2.23.1, 2.23.2, 2.23.3, 2.23.3.1

Weakness classification

CWE-134

References