PT-2001-1319 · Gtk · Gtk+ Library

CVE-2001-0084

·

Publicado

2001-02-02

·

Atualizado

2023-08-03

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: GTK+ library (affected versions not specified)
Description: The issue allows local users to specify arbitrary modules via the GTK MODULES environmental variable. This could potentially allow local users to gain privileges if GTK+ is used by a setuid/setgid program.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2001-0084

Produtos afetados

Gtk+ Library