CVE-2018-18398

Name of the Vulnerable Software and Affected Versions Xfce Thunar version 1.6.15

Description The issue arises when Xfce Thunar 1.6.15 is used with Xfce 4.12, specifically with the IBus-Unikey input method for file searches within the File Manager. This mishandling leads to an out-of-bounds read and results in a segmentation fault (SEGV). An arbitrary local user could potentially exploit this by creating files in the /tmp directory before the victim uses the IBus-Unikey input method.

Recommendations For Xfce Thunar version 1.6.15, consider disabling the IBus-Unikey input method for file searches within the File Manager as a temporary workaround until a patch is available. Restrict access to the /tmp directory to minimize the risk of exploitation.