CVE-2003-0165

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via...

4.6 MediumPublic exploitFix available

CVE-2003-0165 is a medium vulnerability (CVSS 4.6) in Gnome Eog, published March 29, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.68%, the 77th percentile. Fixed in eog 2.2.1.

What does this mean?

Severity: 4.6 MediumCVSS 2.0, NVD
Exploit chance: 1.68%EPSS, 77th percentile
Exploitation: None known1 public exploit
Fixed in: 2.2.1eog +2 more

Description

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.

Exploit likelihood

1.68%Down 1.3 points since Feb 4, 2022

Affected products

gnome eog

Affected packages

Affected packages
Package	Affected	Fixed
`eog` Debian:12	before 2.2.1	2.2.1
`eog` Debian:13	before 2.2.1	2.2.1
`eog` Debian:14	before 2.2.1	2.2.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	GNOME Eye Of Gnome 1.0.x/1.1.x/2.2 - Format String	2003-03-28

What each source reports

NVD Score used4.6

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.

Record: CVE-2003-0165
CVSS 2.0: 4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE ListNo score

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.

Record: CVE-2003-0165
Updated: 2026-11-02

EUVDEUVD-2003-0161No score

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.

Record: EUVD-2003-0161
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wxqm-488m-v2xgNo score

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via...

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.

Record: GHSA-wxqm-488m-v2xg
Updated: 2026-11-02

OSVNo score

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.

Record: CVE-2003-0165
Updated: 2026-11-02

OSVDEBIAN-CVE-2003-0165No score

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.

Record: DEBIAN-CVE-2003-0165
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 5 moreShow less