dbus-glib vulnerability

Related Vulnerabilities: CVE-2010-1172  

An attacker could send crafted input to applications using DBus-GLib and cause them to crash.

It was discovered that DBus-GLib did not properly verify the access flag of exported GObject properties under certain circumstances. A local attacker could exploit this to bypass intended access restrictions or possibly cause a denial of service.

26 May 2011

dbus-glib vulnerability

A security issue affects these releases of Ubuntu and its derivatives:

  • Ubuntu 10.04 LTS
  • Ubuntu 8.04 LTS

Summary

An attacker could send crafted input to applications using DBus-GLib and cause them to crash.

Software Description

  • dbus-glib - GLib bindings for DBus

Details

It was discovered that DBus-GLib did not properly verify the access flag of exported GObject properties under certain circumstances. A local attacker could exploit this to bypass intended access restrictions or possibly cause a denial of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 10.04 LTS
libdbus-glib-1-2 - 0.84-1ubuntu0.2
Ubuntu 8.04 LTS
libdbus-glib-1-2 - 0.74-2ubuntu0.1

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary changes.

References