CVE-2012-4425 libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS envi...
MediumCVSS 6.9
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: it could be argued that this is a vulnerability in the applications that do not cleanse environment variables, not in libgio itself.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/spice-gtk(Debian:12) | < 0.12-5 | 0.12-5 |
| debian/spice-gtk(Debian:13) | < 0.12-5 | 0.12-5 |
| debian/spice-gtk(Debian:14) | < 0.12-5 | 0.12-5 |
| freedesktop spice-gtk | All versions | No fix listed |
| gtk libgio | All versions | No fix listed |
References
- Debian Security Tracker CVE-2012-4425 vendor-advisory
- bugs.debian.org issue-tracking
- [scm-commits] 20120914 [spice-gtk/f18] Add patch fixing CVE 2012-4425 mailing-list patch
- RHSA-2012:1284 vendor-advisory
- 21323 exploit
- [oss-security] 20120912 libdbus CVE-2012-3524 fix mailing-list
- [oss-security] 20120914 Re: libdbus CVE-2012-3524 fix mailing-list
- [oss-security] 20120917 Re: libdbus CVE-2012-3524 fix mailing-list
- 55555 vdb-entry
- [spice-devel] 20120914 [spice-gtk] usb-acl-helper: Clear environment exploit mailing-list
- bugzilla.redhat.com