CVE-2008-3971: GMANEDIT2 Gmanedit

High severity, CVSS 9.3. EPSS: 5.7% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the open_man_file function in callbacks.c in gmanedit 0.4.1 allows remote attackers to execute arbitrary code via a crafted man page, which is not properly handled during utf8 conversion. NOTE: another overflow was reported using a configuration file, but that vector does not have a scenario that crosses privilege boundaries.

Affected products

• GMANEDIT2 Gmanedit: version 0.4.1 only

Published 2008-09-11. Last modified 2026-06-16.