Unscored severity · published Aug 18, 2008
CVE-2008-3533
Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via…
–
CVSS
19.4%
EPSS
No
On KEV
Description
Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command line, as demonstrated by use of yelp within (1) man or (2) ghelp URI handlers in Firefox, Evolution, and unspecified other programs.
Exploitation
Is it being used?
Exploit prediction (EPSS)19.4% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GN
Gnome · Gnome
2.20; 2.22 · source: NVD
YE
Yelp · Gnome
before 2.24 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3533
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3533
Exploit
http://bugzilla.gnome.org/attachment.cgi?id=115890
Exploit
http://bugzilla.gnome.org/show_bug.cgi?id=546364
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
Vendor Advisory
http://secunia.com/advisories/31465
Vendor Advisory
http://secunia.com/advisories/31620
Vendor Advisory
http://secunia.com/advisories/31834