Contents

---
gem: gtk2
cve: 2007-6183
osvdb: 40774
url: http://osvdb.org/show/osvdb/40774
title:
  Ruby-GNOME2 gtk/src/rbgtkmessagedialog.c Gtk::MessageDialog.new() Function
  Format String 
date: 2007-11-27

description: |
  Format string vulnerability in the mdiag_initialize function in
  gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and
  SVN versions before 20071127, allows context-dependent attackers to execute
  arbitrary code via format string specifiers in the message parameter.

cvss_v2: 6.8

patched_versions:
  - "> 0.16.0"

Version data entries

14 entries across 14 versions & 3 rubygems

Version	Path
bundler-budit-0.6.2	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
bundler-budit-0.6.1	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
bundler-audit-0.6.1	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
bundler-audit-0.6.0	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
bundler-audit-0.5.0	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
bundler-audit-0.4.0	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
bundler-audit-0.3.1	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
mrjoy-bundler-audit-0.3.3	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
mrjoy-bundler-audit-0.3.2	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
mrjoy-bundler-audit-0.3.1	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
bundler-audit-0.3.0	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
mrjoy-bundler-audit-0.2.1	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
bundler-audit-0.2.0	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml
mrjoy-bundler-audit-0.1.4	data/ruby-advisory-db/gems/gtk2/OSVDB-40774.yml