Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Ruby-GNOME2 Gtk::MessageDialog.new Function Format String Vulnerability

The Ruby-GNOME2 library is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function.

An attacker can exploit this issue to execute arbitrary machine code in the context of an application using the affected library. A successful attack will compromise the application. Failed attempts may cause denial-of-service conditions.

This issue affects Ruby-GNOME2 0.16.0; other version may be also vulnerable.







 

Privacy Statement
Copyright 2009, SecurityFocus