CVE-2011-1588
First published: Thu Nov 14 2019(Updated: )
Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/thunar | 1.8.4-1 4.16.8-1 4.18.4-1 4.18.7-1 | |
| Xfce Thunar | =1.2.0 | |
| Xfce Thunar | =1.2.1 | |
| Oracle Java Runtime Environment (JRE) | =11.4 | |
| Debian Debian Linux | =8.0 | |
| Debian Debian Linux | =9.0 | |
| Debian Debian Linux | =10.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.xfce.org/xfce/thunar/diff/?id=03dd312e157d4fa8a11d5fa402706ae5b05806fa
- https://security-tracker.debian.org/tracker/CVE-2011-1588
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html
- https://access.redhat.com/security/cve/cve-2011-1588
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1588
- https://github.com/xfce-mirror/thunar/blob/master/NEWS#L774
- https://github.com/xfce-mirror/thunar/commit/03dd312e157d4fa8a11d5fa402706ae5b05806fa
Frequently Asked Questions
What is CVE-2011-1588?
CVE-2011-1588 is a vulnerability in Thunar before version 1.3.1 that could cause a crash when copying and pasting a file name with % format characters due to a format string error.
How severe is CVE-2011-1588?
CVE-2011-1588 has a severity level of high with a CVSS score of 7.
What is the affected software?
The affected software includes Thunar versions 1.2.1 and 1.2.0, Xfce Thunar, Opensuse versions 11.4, Debian Linux versions 8.0, 9.0, and 10.0.
How can I fix CVE-2011-1588?
To fix CVE-2011-1588, update Thunar to version 1.3.1 or higher.
Where can I find more information about CVE-2011-1588?
You can find more information about CVE-2011-1588 on the following references: [1] http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html [2] https://security-tracker.debian.org/tracker/CVE-2011-1588 [3] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1588
- collector/security-tracker-debian
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/severity
- agent/remedy
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- package-manager/debian
- vendor/xfce
- canonical/xfce thunar
- version/xfce thunar/1.2.1
- version/xfce thunar/1.2.0
- vendor/opensuse
- canonical/opensuse opensuse
- version/opensuse opensuse/11.4
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/8.0
- version/debian debian linux/9.0
- version/debian debian linux/10.0