CVE-2008-5660: Gnome Vinagre

Medium severity, CVSS 6.8. EPSS: 9.1% chance of exploitation in the next 30 days.

Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2 and 2.x before 2.24.2 might allow remote attackers to execute arbitrary code via format string specifiers in a crafted URI or VNC server response.

Affected products

• Gnome Vinagre: version 0.5.0 only; version 0.5.1 only; version 2.23.1 only; version 2.23.2 only; version 2.23.3 only; version 2.23.3.1 only; …

Published 2008-12-17. Last modified 2026-06-16.