suse · CVE-2011-4349

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2011-4349 severity moderate: SUSE including 108 source package names (colord-1.1.7-2.42, colord-1.1.7-5.3, …), 248 product×package rows across 46 product lines (SUSE Linux Enterprise Desktop 12, SUSE Linux Enterprise Desktop 12 SP1, … (46 product lines)): Fixed 193, Known Not Affected 55.

Description:

Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.