CVE-2014-1845

An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2018-04-27

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Enlightenment (Enlightenment)

References

• http://www.openwall.com/lists/oss-security/2014/02/03/19
• https://bugzilla.redhat.com/show_bug.cgi?id=1059410
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91216
• https://git.enlightenment.org/core/enlightenment.git/commit/?id=666df815cd86a50343859bce36c5cf968c5f38b0
• https://git.enlightenment.org/core/enlightenment.git/commit/?id=bb4a21e98656fe2c7d98ba2163e6defe9a630e2b