GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
gnome gtk 1.2.8 |