CVE-2011-1709

2011-06-1417:55:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2011-1709

gdm

privilege escalation

mime type

local exploit

security vulnerability

6.3 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.

CPENameOperatorVersion
gnome:gdmgnome gdmeq1.0
gnome:gdmgnome gdmeq2.0
gnome:gdmgnome gdmeq2.2
gnome:gdmgnome gdmeq2.3
gnome:gdmgnome gdmeq2.4
gnome:gdmgnome gdmeq2.5
gnome:gdmgnome gdmeq2.6
gnome:gdmgnome gdmeq2.8
gnome:gdmgnome gdmeq2.13
gnome:gdmgnome gdmeq2.14

CPE	Name	Operator	Version
gnome:gdm	gnome gdm	eq	1.0
gnome:gdm	gnome gdm	eq	2.0
gnome:gdm	gnome gdm	eq	2.2
gnome:gdm	gnome gdm	eq	2.3
gnome:gdm	gnome gdm	eq	2.4
gnome:gdm	gnome gdm	eq	2.5
gnome:gdm	gnome gdm	eq	2.6
gnome:gdm	gnome gdm	eq	2.8
gnome:gdm	gnome gdm	eq	2.13
gnome:gdm	gnome gdm	eq	2.14