Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:gedit:2.10.2:*:*:*:*:*:*:*

part: a version: 2.10.2 update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductGedit (ddc45bc0-da8c-5ee7-8214-a05a26123fe3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gedit purl2cpe 2026-06-01 10:17:24.279306
pkg:deb/ubuntu/gedit purl2cpe 2026-06-01 10:17:24.279307
pkg:github/gnome/gedit purl2cpe 2026-06-01 10:17:24.279309
pkg:rpm/centos/gedit purl2cpe 2026-06-01 10:17:24.279310
pkg:rpm/fedora/gedit purl2cpe 2026-06-01 10:17:24.279312
pkg:rpm/opensuse/gedit purl2cpe 2026-06-01 10:17:24.279313
pkg:sourceforge/gedit purl2cpe 2026-06-01 10:17:24.279315

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-1686 vulnerable 2026-06-08 04:48:27.195720 Details available
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.
Published: 2005-05-25T04:00:00.000Z
Updated: 2024-08-07T21:59:24.052Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.