First published: Wed Jun 29 2011(Updated: )
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
X11 | <=1.5.3 | |
X11 | =1.5 | |
X11 | =1.5.1 | |
X11 | =1.5.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-2504 has a medium severity rating, allowing local users to gain elevated privileges.
To fix CVE-2011-2504, update the x11perf component to version 1.5.4 or later.
CVE-2011-2504 affects x11perf versions before 1.5.4, including 1.5, 1.5.1, 1.5.2, and 1.5.3.
CVE-2011-2504 is an untrusted search path vulnerability that can be exploited through a Trojan horse in the current working directory.
CVE-2011-2504 was reported by the Xorg upstream development team.