Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-1709

Опубликовано: 14 июн. 2011
Источник: nvd
CVSS2: 7.2
EPSS Низкий

Описание

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:gnome:gdm:1.0:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.0:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.5:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.6:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.8:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.13:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.14:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.15:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.16:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.17:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.18:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.19:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.20:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.21:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.22:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.23:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.24:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.25:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.26:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.27:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.28:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.29:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.30:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.31:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.32:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdm:2.32.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:glib:2.28:*:*:*:*:*:*:*

EPSS

Процентиль: 17%
0.00055
Низкий

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu логотип

CVE-2011-1709

ubuntu
больше 14 лет назад

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.

redhat логотип

CVE-2011-1709

redhat
больше 14 лет назад

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.

debian логотип

CVE-2011-1709

debian
больше 14 лет назад

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, ena ...

github логотип

GHSA-m8qj-xwm5-fq5v

github
больше 3 лет назад

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.

EPSS

Процентиль: 17%
0.00055
Низкий

7.2 High

CVSS2

Дефекты

CWE-264