CVE-2011-2504 Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.
MediumCVSS 6.9
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/x11-apps(Debian:12) | < 7.7~1 | 7.7~1 |
| debian/x11-apps(Debian:13) | < 7.7~1 | 7.7~1 |
| debian/x11-apps(Debian:14) | < 7.7~1 | 7.7~1 |
| xfree86 x11perf | <= 1.5.3 | No fix listed |
| xfree86 x11perf | = 1.5 | No fix listed |
| xfree86 x11perf | = 1.5.1 | No fix listed |
| xfree86 x11perf | = 1.5.2 | No fix listed |
References
- Debian Security Tracker CVE-2011-2504 vendor-advisory
- [xorg-announce] 20110727 [ANNOUNCE] x11perf 1.5.4 mailing-list
- RHSA-2013:0502 vendor-advisory
- 58082 vdb-entry
- bugzilla.redhat.com
- x11perf-priv-esc(82241) vdb-entry