7.2

CVE-2011-1709

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnome ≫ Gdm Version1.0
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.0
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.2
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.3
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.4
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.5
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.6
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.8
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.13
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.14
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.15
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.16
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.17
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.18
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.19
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.20
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.21
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.22
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.23
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.24
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.25
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.26
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.27
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.28
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.29
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.30
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.31
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.32
   Gnome ≫ Glib Version2.28
Gnome ≫ Gdm Version2.32.1
   Gnome ≫ Glib Version2.28
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.343
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.2.news
http://git.gnome.org/browse/gdm/commit/?id=d13dd72531599ab7e4c747db3b58a8c17753e08d
Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061264.html
http://secunia.com/advisories/44797
Vendor Advisory
http://secunia.com/advisories/44808
http://www.securityfocus.com/bid/48084
http://www.ubuntu.com/usn/USN-1142-1
https://bugzilla.redhat.com/show_bug.cgi?id=709139
Patch
https://hermes.opensuse.org/messages/8643655