CVEvulnerability
CVE-2011-1709
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-06-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
Affected configurations
• gnome gdm 1.0
• gnome gdm 2.0
• gnome gdm 2.2
• gnome gdm 2.3
• gnome gdm 2.4
• gnome gdm 2.5
• gnome gdm 2.6
• gnome gdm 2.8
• gnome gdm 2.13
• gnome gdm 2.14
• gnome gdm 2.15
• gnome gdm 2.16
• gnome gdm 2.17
• gnome gdm 2.18
• gnome gdm 2.19
• gnome gdm 2.20
• gnome gdm 2.21
• gnome gdm 2.22
• gnome gdm 2.23
• gnome gdm 2.24
• gnome gdm 2.25
• gnome gdm 2.26
• gnome gdm 2.27
• gnome gdm 2.28
• gnome gdm 2.29
• gnome gdm 2.30
• gnome gdm 2.31
• gnome gdm 2.32
• gnome gdm 2.32.1
Related
Weakness · not in database (1)
References
- http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.2.news ftp.gnome.org
- http://git.gnome.org/browse/gdm/commit/?id=d13dd72531599ab7e4c747db3b58a8c17753e08d Patch
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061264.html lists.fedoraproject.org
- http://secunia.com/advisories/44797 Vendor Advisory
- http://secunia.com/advisories/44808 secunia.com
- http://www.securityfocus.com/bid/48084 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1142-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=709139 Patch
- https://hermes.opensuse.org/messages/8643655 hermes.opensuse.org
- http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.2.news ftp.gnome.org
- http://git.gnome.org/browse/gdm/commit/?id=d13dd72531599ab7e4c747db3b58a8c17753e08d Patch
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061264.html lists.fedoraproject.org
- http://secunia.com/advisories/44797 Vendor Advisory
- http://secunia.com/advisories/44808 secunia.com
- http://www.securityfocus.com/bid/48084 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1142-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=709139 Patch
- https://hermes.opensuse.org/messages/8643655 hermes.opensuse.org