CVE-2011-1588

HIGH

Thunar < 1.3.1 - Denial of Service via Format String Error in File Name Handling

Title source: llm

Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error.

Core 6

Core References

Third Party Advisory x_refsource_misc

Issue Tracking, Patch, Third Party Advisory x_refsource_misc

Not Applicable, Third Party Advisory x_refsource_misc

Mailing List, Third Party Advisory x_refsource_misc

Patch x_refsource_misc

Various Sources x_refsource_misc

CVSS v3 7.8

EPSS 0.0107

EPSS Percentile 60.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-134

Status published

Products (6)

debian/debian_linux 8.0

debian/debian_linux 9.0

debian/debian_linux 10.0

opensuse/opensuse 11.4

xfce/thunar 1.2.0

xfce/thunar 1.2.1

Published Nov 14, 2019

Tracked Since Feb 18, 2026