Vulnerability Description
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.
CVSS Score
6.9
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Xfree86 | X11Perf | <= 1.5.3 |
References
- http://lists.freedesktop.org/archives/xorg-announce/2011-July/001715.html
- http://rhn.redhat.com/errata/RHSA-2013-0502.html
- http://www.securityfocus.com/bid/58082
- https://bugzilla.redhat.com/show_bug.cgi?id=717672
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82241
- http://lists.freedesktop.org/archives/xorg-announce/2011-July/001715.html
- http://rhn.redhat.com/errata/RHSA-2013-0502.html
- http://www.securityfocus.com/bid/58082
- https://bugzilla.redhat.com/show_bug.cgi?id=717672
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82241
FAQ
What is CVE-2011-2504?
CVE-2011-2504 is a vulnerability with a CVSS score of 6.9 (MEDIUM). Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.
How severe is CVE-2011-2504?
CVE-2011-2504 has been rated MEDIUM with a CVSS base score of 6.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-2504?
Check the references section above for vendor advisories and patch information. Affected products include: Xfree86 X11Perf.