CVE-2016-9951

MEDIUM

Apport 2.x (Ubuntu Desktop 12.10 < 16.04) - Local Code Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2016-9951 has a selected CVSS score of 6.5 (medium); EIP currently links 1 catalogued exploit.

Description

An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `RespawnCommand` or `ProcCmdline` fields. This command will be executed if a user clicks the Relaunch button on the Apport prompt from the malicious crash file. The fix is to only show the Relaunch button on Apport crash files generated by local systems. The Relaunch button will be hidden when crash files are opened directly in Apport-GTK.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBApport 2.x (Ubuntu Desktop 12.10 < 16.04) - Local Code ExecutionExploitDB exploitby Donncha OCearbhaillNot analyzed1 file

linked to 3 vulnerabilities

ExploitDB
PoC details

References

7