CVE-2010-4833: Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse…

PriorityP433critical9.3CVSS 2.0

AVNACMAuNCCICAC

EPSS

2.26%

80.8th percentile

Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than CVE-2010-4831.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	gtk+2.0	—	—
gnome	gtk	< 2.24.0	2.24.0

CVSS provenance

nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C

vendor_debian6.9LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.