CVE catalog
CVE-2008-3971
gmanedit: CVE-2008-3971
- Severity
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 5.69% · Oct 25, 2026
Heap-based buffer overflow in the open_man_file function in callbacks.c in gmanedit 0.4.1 allows remote attackers to execute arbitrary code via a crafted man page, which is not properly handled during utf8 conversion. NOTE: another overflow was reported using a configuration file, but that vector does not have a scenario that crosses privilege boundaries.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | gmanedit | bookworm | 0.4.2-8 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | gmanedit | source | bookworm | 0.4.1-1.1 | low | Not reported | [497835] |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
Observed: