2 matches found
CVE-2013-0292
CVE-2013-0292 affects dbus-glib’s dbus_g_proxy_manager_filter, where the NameOwnerChanged signal sender is not properly verified. This allows local privilege escalation if a spoofed signal is processed. Concrete references in connected docs note the issue in dbus-glib prior to 0.100.1 and indicat...
CVE-2010-1172
CVE-2010-1172 affects dbus-glib 0.73, where exported GObject properties ignore access flags, enabling local users to bypass restrictions and potentially cause a denial of service by altering properties in devices/services such as DeviceKit-Power, NetworkManager, and ModemManager. The vulnerabilit...