Vulnerability Report

CVE-2005-1686

Title: gedit format string RCE/DoS (Disputed)

DoS

Proof Of Concept

PoC Available for CVE-2005-1686

CWE Category NVD-CWE-noinfo

Published Date May 20, 2005

Modified Date Jun 16, 2026

Exploit Status Available

Score 2.6 CVSS v2.0

Exploit Probability (EPSS)

7.65%

Vulnerability Summary

CVE-2005-1686: Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.

Impacted Vendors

gnome 1

Reference Links

http://marc.info/?l=bugtraq&m=111661117701398&w=2 http://security.gentoo.org/glsa/glsa-200506-09.xml http://www.debian.org/security/2005/dsa-753 http://www.novell.com/linux/security/advisories/2005_36_sudo.html http://www.redhat.com/support/errata/RHSA-2005-499.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1245 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9845 https://usn.ubuntu.com/138-1/ http://marc.info/?l=bugtraq&m=111661117701398&w=2 http://security.gentoo.org/glsa/glsa-200506-09.xml http://www.debian.org/security/2005/dsa-753 http://www.novell.com/linux/security/advisories/2005_36_sudo.html http://www.redhat.com/support/errata/RHSA-2005-499.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1245 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9845 https://usn.ubuntu.com/138-1/

CVSS v2.0

Source Entity [email protected]

Severity LOW

2.6

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:H/Au:N/C:N/I:N/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2005-1686 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/25688

View Code

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 03, 2025 MODIFIED

Vulnerability data or affected products updated.

May 20, 2005 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:H/Au:N/C:N/I:N/A:P

Affected Stack

No specific products linked.