Arbitrary Module Specification Vulnerability in GTK+ Library

CVE-2001-0084 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program.

Learn more about our User Device Pen Test.