CVE-2003-0165 - Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via for

CVE-2003-0165

Summary

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.

References

Vulnerable Configurations

cpe:2.3:a:gnome:eog:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:gnome:eog:2.2.0:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 11-10-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

oval via4

accepted

2007-04-25T19:52:33.934-04:00

class

vulnerability

contributors

name Jay Beale
organization Bastille Linux
name Jay Beale
organization Bastille Linux
name Thomas R. Jones
organization Maitreya Security

description

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.

family

unix

oval:org.mitre.oval:def:52

status

accepted

submitted

2003-08-14T12:00:00.000-04:00

title

Red Hat Eye of GNOME (EOG) Packages Fix Format String Vulnerability

version

redhat via4

advisories

rhsa

id	RHSA-2003:128

refmap via4

bid	7121
bugtraq	20030328 CORE-2003-0304-03: Vulnerability in GNOME's Eye of Gnome
cert-vn	VU#363001
mandrake	MDKSA-2003:048
misc	http://www.coresecurity.com/common/showdoc.php?idx=312&idxseccion=10
vulnwatch	20030328 Vulnerability in GNOME's Eye of Gnome

Last major update

11-10-2017 - 01:29

Published

02-04-2003 - 05:00

Last modified

11-10-2017 - 01:29