gtk2 vulnerable to Use of Externally-Controlled Format String (GHSA-xgj6-pgrm-x4r2)
Published: 2017-10-24T18:33:38Z
Aliases: CVE-2007-6183
Severity: MODERATE · CWE: CWE-134

Format string vulnerability in the `mdiag_initialize` function in `gtk/src/rbgtkmessagedialog.c` in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.

Affected packages:
package: ecosystem: RubyGems
name: gtk2
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.17.0