Use of Externally-Controlled Format String
CVE-2011-1588
Summary
Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error.
- LOW
- LOCAL
- HIGH
- UNCHANGED
- REQUIRED
- NONE
- HIGH
- HIGH
CWE-134 - Use of Externally-Controlled Format String
The software uses a function that accepts a format string as an argument, but the format string originates from an external source.
References
Advisory Timeline
- Published
