Logo
›
›vulnerability›CVE-2008-3533
Name
CVE-2008-3533
Source
NVD ( link)Debian ( link)
Description
Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command line, as demonstrated by use of yelp within (1) man or (2) ghelp URI handlers in Firefox, Evolution, and unspecified other programs.
CWEs
CWE-134
Published Date
Updated Date
Workaround
-
Advisories
http://bugzilla.gnome.org/attachment.cgi?id=115890Exploit
http://bugzilla.gnome.org/show_bug.cgi?id=546364Exploit
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.htmlMailing List
http://secunia.com/advisories/31465Vendor Advisory
http://secunia.com/advisories/31620Vendor Advisory
http://secunia.com/advisories/31834Vendor Advisory
http://secunia.com/advisories/32629Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:175Product
http://www.securityfocus.com/bid/30690VDB Entry
http://www.ubuntu.com/usn/usn-638-1Third Party Advisory
http://www.vupen.com/english/advisories/2008/2393Broken Link
https://bugs.launchpad.net/ubuntu/+source/yelp/+bug/254860Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/44449VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00222.htmlMailing List
http://bugzilla.gnome.org/attachment.cgi?id=115890Exploit
http://bugzilla.gnome.org/show_bug.cgi?id=546364Exploit
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.htmlMailing List
http://secunia.com/advisories/31465Vendor Advisory
http://secunia.com/advisories/31620Vendor Advisory
http://secunia.com/advisories/31834Vendor Advisory
http://secunia.com/advisories/32629Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:175Product
http://www.securityfocus.com/bid/30690VDB Entry
http://www.ubuntu.com/usn/usn-638-1Third Party Advisory
http://www.vupen.com/english/advisories/2008/2393Broken Link
https://bugs.launchpad.net/ubuntu/+source/yelp/+bug/254860Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/44449VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00222.htmlMailing List

Analysis#

Affected Component
Analysis
yelp
False Positive

Vulnerability Rating#

10
CVSSv2

Others affected components#

Name
Project
Project Version
Version
Status
yelp
yocto
kirkstone
42.2
Not Affected
yelp
yocto
scarthgap
42.2
Not Affected