CVE-2010-4833

Currently unrated

Key Information:

Vendor
Gnome
Status
Gtk
Vendor
CVE Published:
6 September 2011

Summary

Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than CVE-2010-4831.

References

http://www.securityfocus.com/bid/49449
vdb-entryx_refsource_BID
http://git.gnome.org/browse/gtk+/commit/modules/engines/m...
x_refsource_CONFIRM
http://secunia.com/advisories/45815
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.