CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-2737

The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 22.4%

CVSS Severity

CVSS v2 Score 1.9

References

Products affected by CVE-2012-2737

Ray Stode » Accountsservice » Version: 0.4

cpe:2.3:a:ray_stode:accountsservice:0.4
Ray Stode » Accountsservice » Version: 0.5

cpe:2.3:a:ray_stode:accountsservice:0.5
Ray Stode » Accountsservice » Version: 0.6

cpe:2.3:a:ray_stode:accountsservice:0.6
Ray Stode » Accountsservice » Version: 0.6.1

cpe:2.3:a:ray_stode:accountsservice:0.6.1
Ray Stode » Accountsservice » Version: 0.6.10

cpe:2.3:a:ray_stode:accountsservice:0.6.10
Ray Stode » Accountsservice » Version: 0.6.11

cpe:2.3:a:ray_stode:accountsservice:0.6.11
Ray Stode » Accountsservice » Version: 0.6.12

cpe:2.3:a:ray_stode:accountsservice:0.6.12
Ray Stode » Accountsservice » Version: 0.6.13

cpe:2.3:a:ray_stode:accountsservice:0.6.13
Ray Stode » Accountsservice » Version: 0.6.14

cpe:2.3:a:ray_stode:accountsservice:0.6.14
Ray Stode » Accountsservice » Version: 0.6.15

cpe:2.3:a:ray_stode:accountsservice:0.6.15
Ray Stode » Accountsservice » Version: 0.6.16

cpe:2.3:a:ray_stode:accountsservice:0.6.16
Ray Stode » Accountsservice » Version: 0.6.17

cpe:2.3:a:ray_stode:accountsservice:0.6.17
Ray Stode » Accountsservice » Version: 0.6.18

cpe:2.3:a:ray_stode:accountsservice:0.6.18
Ray Stode » Accountsservice » Version: 0.6.19

cpe:2.3:a:ray_stode:accountsservice:0.6.19
Ray Stode » Accountsservice » Version: 0.6.2

cpe:2.3:a:ray_stode:accountsservice:0.6.2
Ray Stode » Accountsservice » Version: 0.6.20

cpe:2.3:a:ray_stode:accountsservice:0.6.20
Ray Stode » Accountsservice » Version: 0.6.21

cpe:2.3:a:ray_stode:accountsservice:0.6.21
Ray Stode » Accountsservice » Version: 0.6.3

cpe:2.3:a:ray_stode:accountsservice:0.6.3
Ray Stode » Accountsservice » Version: 0.6.4

cpe:2.3:a:ray_stode:accountsservice:0.6.4
Ray Stode » Accountsservice » Version: 0.6.5

cpe:2.3:a:ray_stode:accountsservice:0.6.5
Ray Stode » Accountsservice » Version: 0.6.6

cpe:2.3:a:ray_stode:accountsservice:0.6.6
Ray Stode » Accountsservice » Version: 0.6.7

cpe:2.3:a:ray_stode:accountsservice:0.6.7
Ray Stode » Accountsservice » Version: 0.6.8

cpe:2.3:a:ray_stode:accountsservice:0.6.8
Ray Stode » Accountsservice » Version: 0.6.9

cpe:2.3:a:ray_stode:accountsservice:0.6.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-2737

Products

Pricing

Contact Us