7.2

CVE-2011-1709

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnome ≫ Gdm Version 1.0
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.0
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.2
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.3
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.4
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.5
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.6
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.8
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.13
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.14
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.15
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.16
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.17
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.18
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.19
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.20
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.21
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.22
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.23
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.24
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.25
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.26
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.27
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.28
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.29
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.30
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.31
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.32
   Gnome ≫ Glib Version 2.28
Gnome ≫ Gdm Version 2.32.1
   Gnome ≫ Glib Version 2.28
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.343
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.2.news
http://git.gnome.org/browse/gdm/commit/?id=d13dd72531599ab7e4c747db3b58a8c17753e08d
Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061264.html
http://secunia.com/advisories/44797
Vendor Advisory
http://secunia.com/advisories/44808
http://www.securityfocus.com/bid/48084
http://www.ubuntu.com/usn/USN-1142-1
https://bugzilla.redhat.com/show_bug.cgi?id=709139
Patch
https://hermes.opensuse.org/messages/8643655