From Bugzilla Helper: User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20050519 Netscape/8.0.1 Description of problem: 05.21.15 CVE: Not Available Platform: Linux Title: gedit Filename Format String Issue Description: gedit is an open source text processing application. It is vulnerable to a format string issue because the application is unable to process filenames with malicious format specifiers. gEdit version 2.2.0 is reported to be vulnerable. Ref: http://www.securityfocus.com/archive/1/398634 Version-Release number of selected component (if applicable): How reproducible: Couldn't Reproduce Steps to Reproduce: 1. See the URL for exploit steps. 2. 3. Actual Results: The exploit didn't run, but gedit reported that the file "AA%n%n%n.c" didn't exist so there's a format string problem somewhere. Expected Results: Gedit should have opened the file and displayed its (binary) contents. Additional info:
Fedora Legacy project has ended. These will not be fixed by Fedora Legacy.