Format String Vulnerability in PolicyKit Affects Multiple Versions
CVE-2008-1658

Currently unrated

Key Information:

Status
Vendor
CVE Published:
11 April 2008

What is CVE-2008-1658?

The format string vulnerability in PolicyKit's grant helper (polkit-grant-helper.c) allows attackers to exploit improperly handled format strings in password inputs. This could result in a denial of service, causing the application to crash, and may potentially allow the execution of arbitrary code. Various distributions like Ubuntu, Mandriva, and Fedora have provided advisories regarding this vulnerability, urging users to update their systems to mitigate the risks associated with this issue.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.