VDB
CVE-2008-5660
CVE-2008-5660
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2 and 2.x before 2.24.2 might allow remote attackers to execute arbitrary code via format string specifiers in a crafted URI or VNC server response.
EPSS 9.12% · 95.2th percentile
Risk Scores
CVSS 2.0
6.800000190734863
EPSS Score
9.12%
95.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| gnome | vinagre | 2.23.90, 0.5.0, 0.5.1 |
| n/a | n/a | n/a |
Timeline
- Dec 9, 2008 PoC Published
- Dec 17, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 22, 2023 EPSS Score
- May 6, 2023 EPSS Score
- May 27, 2023 EPSS Score
References
- 7401 exploit
- http://www.coresecurity.com/content/vinagre-format-string url
- 33082 third-party-advisory
- ADV-2008-3362 vdb
- 33046 third-party-advisory
- FEDORA-2008-10941 vendor-advisory
- USN-689-1 vendor-advisory
- FEDORA-2008-10932 vendor-advisory
- 20081209 CORE-2008-1127 - Vinagre show_error() format string vulnerability mailing-list
- 33041 third-party-advisory
- MDVSA-2008:240 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=475070 url
- https://nvd.nist.gov/vuln/detail/CVE-2008-5660 advisory