CVE-2018-16267

The system-popup system service in Tizen allows an unprivileged process to perform popup-related system actions, due to improper D-Bus security policy configurations. Such actions include the triggering system poweroff menu, and prompting a popup with arbitrary strings. This affects Tizen before...

CVE-2018-16267

The CVE affects Tizen’s system-popup service, where an unprivileged process can trigger popup actions and the power-off menu due to insecure D-Bus policy configurations. Affected versions include Tizen before 5.0 M1 and Tizen-based devices (e.g., Samsung Galaxy Gear series) before build RE2. Root...