Vulnerability in Net Activity Viewer

CVE-2008-1132

Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activity Viewer privileges to execute arbitrary code via a malicious gksu program, which is invoked during the Restart As Root action.

EPSS: 0.003 (22.9th percentile) — read the EPSS interpretation.

Affected products

Net_activity_viewer — versions 0.2.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)