Every CVE Search/ Get API key

CVE-2005-1686

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service ...

2.6 LowPublic exploitFix available

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.

Exploit likelihood

7.66%Up 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.

Record
CVE-2005-1686
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.

Record
CVE-2005-1686
Updated
2026-11-02
EUVDEUVD-2005-1688 No score

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.

Record
EUVD-2005-1688
Updated
2026-11-03
GitHub AdvisoriesGHSA-r7hv-4wrp-wf62 No score

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service ...

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.

Record
GHSA-r7hv-4wrp-wf62
Updated
2026-11-02
OSV No score

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.

Record
CVE-2005-1686
Updated
2026-11-02
OSVDEBIAN-CVE-2005-1686 No score

Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.

Record
DEBIAN-CVE-2005-1686
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gedit
Debian:12
 before 2.10.3-1
2.10.3-1
gedit
Debian:13
 before 2.10.3-1
2.10.3-1
gedit
Debian:14
 before 2.10.3-1
2.10.3-1
gedit
Debian:3.1
 before 2.8.3-4sarge1, plus listed versions
2.8.3-4
2.8.3-4sarge1
gedit
Red Hat:enterprise_linux:3::as
 before 1:2.2.2-4.rhel3
1:2.2.2-4.rhel3
gedit-debuginfo
Red Hat:enterprise_linux:3::as
 before 1:2.2.2-4.rhel3
1:2.2.2-4.rhel3
gedit
Red Hat:enterprise_linux:3::desktop
 before 1:2.2.2-4.rhel3
1:2.2.2-4.rhel3
gedit-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 1:2.2.2-4.rhel3
1:2.2.2-4.rhel3
gedit
Red Hat:enterprise_linux:3::es
 before 1:2.2.2-4.rhel3
1:2.2.2-4.rhel3
gedit-debuginfo
Red Hat:enterprise_linux:3::es
 before 1:2.2.2-4.rhel3
1:2.2.2-4.rhel3
Show 14 moreShow less
Affected packages
PackageAffectedFixed
gedit
Red Hat:enterprise_linux:3::ws
 before 1:2.2.2-4.rhel3
1:2.2.2-4.rhel3
gedit-debuginfo
Red Hat:enterprise_linux:3::ws
 before 1:2.2.2-4.rhel3
1:2.2.2-4.rhel3
gedit
Red Hat:enterprise_linux:4::as
 before 1:2.8.1-4
1:2.8.1-4
gedit-debuginfo
Red Hat:enterprise_linux:4::as
 before 1:2.8.1-4
1:2.8.1-4
gedit-devel
Red Hat:enterprise_linux:4::as
 before 1:2.8.1-4
1:2.8.1-4
gedit
Red Hat:enterprise_linux:4::desktop
 before 1:2.8.1-4
1:2.8.1-4
gedit-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 1:2.8.1-4
1:2.8.1-4
gedit-devel
Red Hat:enterprise_linux:4::desktop
 before 1:2.8.1-4
1:2.8.1-4
gedit
Red Hat:enterprise_linux:4::es
 before 1:2.8.1-4
1:2.8.1-4
gedit-debuginfo
Red Hat:enterprise_linux:4::es
 before 1:2.8.1-4
1:2.8.1-4
gedit-devel
Red Hat:enterprise_linux:4::es
 before 1:2.8.1-4
1:2.8.1-4
gedit
Red Hat:enterprise_linux:4::ws
 before 1:2.8.1-4
1:2.8.1-4
gedit-debuginfo
Red Hat:enterprise_linux:4::ws
 before 1:2.8.1-4
1:2.8.1-4
gedit-devel
Red Hat:enterprise_linux:4::ws
 before 1:2.8.1-4
1:2.8.1-4

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBGedit 2.x - Filename Format String2005-05-30

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-1686 is a low vulnerability (CVSS 2.6) in Gnome Gedit, published May 20, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.66%, the 94th percentile. Fixed in gedit 2.10.3-1.

References

Show 12 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open