CVE-2007-6183
gtk2 vulnerable to Use of Externally-Controlled Format String
CVE-2007-6183 is a medium vulnerability (CVSS 6.8) in Ruby Gnome2 Gnome2, published November 30, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.38%, the 88th percentile. Fixed in gtk2 0.17.0.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 3.38%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.17.0gtk2 +3 more
Description
Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gtk2RubyGems | before 0.17.0 | 0.17.0 |
ruby-gnome2Debian:4.0 | before 0.15.0-1.1etch1, plus listed versions 0.15.0-1.1 | 0.15.0-1.1etch1 |
ruby-gnome2Debian:3.1 | before 0.12.0-2sarge1, plus listed versions 0.12.0-2 | 0.12.0-2sarge1 |
ruby-gnome2Debian:5.0 | before 0.16.0-10~lenny1 | 0.16.0-10~lenny1 |
What each source reports
NVD Score used
Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.
- Record
CVE-2007-6183- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE ListNo score
Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.
- Record
CVE-2007-6183- Updated
- 2026-11-02
EUVDEUVD-2017-0330No score
Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.
- Record
EUVD-2017-0330- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xgj6-pgrm-x4r2No score
gtk2 vulnerable to Use of Externally-Controlled Format String
Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.
- Record
GHSA-xgj6-pgrm-x4r2- Weakness
- CWE-134
- Updated
- 2026-11-02
OSVNo score
Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.
- Record
CVE-2007-6183- Updated
- 2026-11-02
OSVGHSA-xgj6-pgrm-x4r2No score
gtk2 vulnerable to Use of Externally-Controlled Format String
Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.
- Record
GHSA-xgj6-pgrm-x4r2- Weakness
- CWE-134
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
security.gentoo.org/glsa/glsa-200712-09.xml
secunia.com/advisories/27825
ruby-gnome2.svn.sourceforge.net/viewvc/ruby-gnome2/ruby-gnome2/trunk/gtk/src/rbgtkmessagedialog.c?view=log
securityfocus.com/bid/26616
Show 19 moreShow less
redhat.com/archives/fedora-package-announce/2007-December/msg00214.html
bugzilla.redhat.com/show_bug.cgi?id=402871
securityreason.com/securityalert/3407
vupen.com/english/advisories/2007/4022
bugs.gentoo.org/show_bug.cgi?id=200623
bugs.debian.org/cgi-bin/bugreport.cgi?bug=453689
osvdb.org/40774
debian.org/security/2007/dsa-1431
em386.blogspot.com/2007/11/your-favorite-better-than-c-scripting.html
mandriva.com/security/advisories?name=MDVSA-2008:033
exchange.xforce.ibmcloud.com/vulnerabilities/38757
nvd.nist.gov/vuln/detail/CVE-2007-6183
web.archive.org/web/20200228174159/http://www.securityfocus.com/bid/26616
github.com/advisories/GHSA-xgj6-pgrm-x4r2