CVE-2011-2504: Medium severity x11 vulnerability
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.
Other sources
Xorg upstream alerted us to an issue in the x11perfcomp script. The script places a '.' in the PATH environment variable which could result in an attacker being able to execute arbitrary code if a user runs x11perfcomp from an attacker controlled directory.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2504?
CVE-2011-2504 has a medium severity rating, allowing local users to gain elevated privileges.
How do I fix CVE-2011-2504?
To fix CVE-2011-2504, update the x11perf component to version 1.5.4 or later.
Which software is affected by CVE-2011-2504?
CVE-2011-2504 affects x11perf versions before 1.5.4, including 1.5, 1.5.1, 1.5.2, and 1.5.3.
What type of vulnerability is CVE-2011-2504?
CVE-2011-2504 is an untrusted search path vulnerability that can be exploited through a Trojan horse in the current working directory.
Who reported the CVE-2011-2504 vulnerability?
CVE-2011-2504 was reported by the Xorg upstream development team.