CVE-2006-6105

Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display...

4.3 Medium

Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows local users to execute arbitrary code via format string specifiers in a hostname, which are used in an error dialog.

Exploit likelihood

0.41%Down 1.8 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2006-6105
CVSS 2.0: 4.3 MediumAV:L/AC:L/Au:S/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-6105
Updated: 2026-11-02

EUVDEUVD-2006-6088 No score

Record: EUVD-2006-6088
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2q7v-r75f-p94f No score

Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display...

Record: GHSA-2q7v-r75f-p94f
Updated: 2026-11-02

Affected products

gnome gdm

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-6105 is a medium vulnerability (CVSS 4.3) in Gnome Gdm, published December 15, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.

References

Show 11 moreShow less