CVE-2001-0084

The CVE-2001-0084 issue affects the GTK+ library, where the GTK_MODULES environment variable lets local users specify arbitrary modules. If GTK+ is used by a setuid/setgid program, this can let local users gain privileges. Reports from PT-2001-1319 describe GTK+ (affected versions not specified) ...

Дырка в gtk+ (GTK_MODULES)

Пользователь может указать расположение библиотек через переменную GTKMODULES...