PT-2012-1088

Name of the Vulnerable Software and Affected Versions spice-gtk versions 0.11 spice-gtk-tools versions 0.11 spice-gtk-python versions 0.11 spice-glib versions 0.11 spice-gtk-devel versions 0.11 spice-glib-devel versions 0.11 spice-gtk-debuginfo versions 0.11 Description The issue allows local use...

dbus: privilege escalation when libdbus is used in setuid/setgid application

libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the...