oss-sec mailing list archives
CVE request: vinagre
From: Tomas Hoger <thoger () redhat com>
Date: Mon, 8 Dec 2008 09:36:49 +0100
vinagre upstream released new upstream versions 0.5.2 and 2.24.2 fixing format string issue in vinagre_utils_show_error() in src/vinagre-utils.c. Upstream commits: Gnome 2.22 branch (0.5.x): http://svn.gnome.org/viewvc/vinagre?view=revision&revision=528 Gnome 2.24 branch (2.24.x): http://svn.gnome.org/viewvc/vinagre?view=revision&revision=525 I did not have an opportunity what attack vectors exist for this flaw. Upstream seems to treat is as a security flaw, so probably deserves CVE name. Thank you! -- Tomas Hoger / Red Hat Security Response Team
Current thread:
- CVE request: vinagre Tomas Hoger (Dec 08)