{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"critical"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2008-3533","title":"Title"},{"category":"description","text":"Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command line, as demonstrated by use of yelp within (1) man or (2) ghelp URI handlers in Firefox, Evolution, and unspecified other programs.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2008-3533","url":"https://www.suse.com/security/cve/CVE-2008-3533"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 414936 for CVE-2008-3533","url":"https://bugzilla.suse.com/414936"},{"category":"external","summary":"Advisory link for SUSE-SR:2008:024","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JA5WW2OFW67D4DPWMUFRNO5RW42W4IBC/#JA5WW2OFW67D4DPWMUFRNO5RW42W4IBC"}],"title":"SUSE CVE CVE-2008-3533","tracking":{"current_release_date":"2023-12-09T03:38:26Z","generator":{"date":"2023-02-15T06:07:28Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2008-3533","initial_release_date":"2023-02-15T06:07:28Z","revision_history":[{"date":"2023-02-15T06:07:28Z","number":"2","summary":"Current version"},{"date":"2023-12-08T05:15:58Z","number":"3","summary":"Current version"},{"date":"2023-12-09T03:38:26Z","number":"4","summary":"Current version"}],"status":"interim","version":"4"}}}