Code injection

daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme...

PT-2015-4920

Name of the Vulnerable Software and Affected Versions sddm versions prior to 0.13.0 Description The issue is related to the daemon/Greeter.cpp in sddm, where it does not properly disable the KDE crash handler. This allows local users to gain privileges by crashing a greeter when using certain...