CVE-2006-6105: Gnome Gdm

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows local users to execute arbitrary code via format string specifiers in a hostname, which are used in an error dialog.

Affected products

• Gnome Gdm: version 2.14.1 only; version 2.16 only; version 2.16.1 only; version 2.16.2 only

Published 2006-12-15. Last modified 2026-06-16.