CVE-2011-1588
Severity CVSS v4.0:
Pending analysis
Type:
CWE-134
Format String Vulnerability
Publication date:
14/11/2019
Last modified:
21/11/2024
Description
Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Base Score 2.0
6.80
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:xfce:thunar:1.2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:xfce:thunar:1.2.1:*:*:*:*:*:*:* | ||
| cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* | ||
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html
- https://access.redhat.com/security/cve/cve-2011-1588
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1588
- https://github.com/xfce-mirror/thunar/blob/master/NEWS#L774
- https://github.com/xfce-mirror/thunar/commit/03dd312e157d4fa8a11d5fa402706ae5b05806fa
- https://security-tracker.debian.org/tracker/CVE-2011-1588
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html
- https://access.redhat.com/security/cve/cve-2011-1588
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1588
- https://github.com/xfce-mirror/thunar/blob/master/NEWS#L774
- https://github.com/xfce-mirror/thunar/commit/03dd312e157d4fa8a11d5fa402706ae5b05806fa
- https://security-tracker.debian.org/tracker/CVE-2011-1588



