Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the (1) syslog_message and (2) syslog_io_message functions.
| Software | From | Fixed in |
|---|---|---|
| gnome / libgtop_daemon | 1.0.12 | 1.0.12.x |
| gnome / libgtop_daemon | 1.0.6 | 1.0.6.x |
| gnome / libgtop_daemon | 1.0.7 | 1.0.7.x |
| gnome / libgtop_daemon | 1.0.9 | 1.0.9.x |