The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command line, as demonstrated by use of yelp within (1) man or (2) ghelp URI handlers in Firefox, Evolution, and unspecified other programs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade yelp | Jul 30, 2024 | Aug 18, 2008 |
| Gentoo Linux | — | Upgrade gnome-extra/yelp. | Oct 30, 2017 | Aug 18, 2008 |
| Suse | — | Upgrade yelp | Feb 17, 2015 | Aug 18, 2008 |
| Ubuntu | — | Upgrade yelp | Nov 8, 2024 | Aug 18, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub