CVE-2011-1709

Publication date 31 May 2011

Last updated 24 July 2024

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
gdm	11.04 natty	Fixed 2.32.1-0ubuntu3.2
	10.10 maverick	Not affected
	10.04 LTS lucid	Not affected
	8.04 LTS hardy	Ignored end of life

How can I get the fixes?
What do statuses mean?

Notes

jdstrand

Ubuntu 11.04 is affected, but requires a non-standard polickit configuration

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-1142-1
GDM vulnerability
1 June 2011

Other references

https://www.cve.org/CVERecord?id=CVE-2011-1709