CVE-2014-4910 in xf86-video-intelinfo

Summary

Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the interface name.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

07/11/2014

Disclosure

07/24/2014

Entries

1

CPE

ready

CWE

CWE-22

CVSS

5.1

EPSS

0.00302

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2014-4910
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2014-4910
CVE Detailshttps://www.cvedetails.com/cve/CVE-2014-4910/

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!