CVE-2010-4833 Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working dire...
HighCVSS 9.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than CVE-2010-4831.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME gtk | < 2.24.0 | 2.24.0 |
References
- git.gnome.org patch
- 45815 broken-link third-party-advisory
- 49449 broken-link third-party-advisory vdb-entry
- Debian Security Tracker CVE-2010-4833 vendor-advisory