CVE-2011-1709
N/A
Published: June 14, 2011 at 05:00 PM UTC
Updated: June 16, 2026 at 11:29 PM UTC
2 products affected across 1 vendorGdmGLib
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.4%
Description
GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (9)
x_refsource_CONFIRM
Source: [email protected]
http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.2.newsx_refsource_CONFIRMPatch
Source: [email protected]
http://git.gnome.org/browse/gdm/commit/?id=d13dd72531599ab7e4c747db3b58a8c17753e08dVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061264.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/44797Quick Info
StatusMODIFIED
CWE
CWE-264
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card