Description
Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | ruby-gnome2 | 0.16.0-10~lenny1 | DTSA-102-1 |
| Debian 4.0 | ruby-gnome2 | 0.15.0-1.1etch1 | DSA-1431-1 |
| Debian 3.1 | ruby-gnome2 | 0.12.0-2sarge1 | DSA-1431-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | gtk2 | < 0.17.0 | 0.17.0 | GHSA-xgj6-pgrm-x4r2 |
Advisories 2
- DSA-1431-1 ruby-gnome2 - format string Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-102-1 ruby-gnome2 - format string vulnerability Debian Security (DSA / DLA) · Mar 9, 2026
References
- GLSA-200712-09 vendor-advisory
- 27825 third-party-advisory
- http://ruby-gnome2.svn.sourceforge.net/viewvc/ruby-gnome2/ruby-gnome2/trunk/gtk/src/rbgtkmessagedialog.c?view=log
- 28022 third-party-advisory
- 26616 vdb-entry
- 20071127 Ruby/Gnome2 0.16.0 Format String Vulnerability mailing-list
- FEDORA-2007-4216 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=402871
- 3407 third-party-advisory
- ADV-2007-4022 vdb-entry
- FEDORA-2007-4229 vendor-advisory
- 27975 third-party-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=200623
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453689
- 28060 third-party-advisory
- 40774 vdb-entry
- DSA-1431 vendor-advisory
- http://em386.blogspot.com/2007/11/your-favorite-better-than-c-scripting.html
- MDVSA-2008:033 vendor-advisory
- rubygnome2-mdiaginitialize-format-string(38757) vdb-entry