CVE-2003-0165

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-04-02 · updated 2026-06-16

Description

Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.

Affected products

GNOME Eog: 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.1.1 (+4)

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0157.html
http://marc.info/?l=bugtraq&m=104887189724146&w=2
http://www.coresecurity.com/common/showdoc.php?idx=312&idxseccion=10
http://www.kb.cert.org/vuls/id/363001
http://www.mandriva.com/security/advisories?name=MDKSA-2003:048
http://www.redhat.com/support/errata/RHSA-2003-128.html
http://www.securityfocus.com/bid/7121
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A52
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0157.html
http://marc.info/?l=bugtraq&m=104887189724146&w=2
http://www.coresecurity.com/common/showdoc.php?idx=312&idxseccion=10
http://www.kb.cert.org/vuls/id/363001

Get alerted when CVE-2003-0165 or the next vulnerability affects your stack