Unscored CVE-2014-4910 EUVD-2014-4829GHSA-6qc7-cwg9-8f4p

Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overw…

Published Jul 24, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the interface name.

References

108851 vdb-entry
[oss-security] 20140704 X.Org intel driver dev snapshots, backlight helper issue mailing-list
[xorg-commit] 20140704 xf86-video-intel: tools/backlight_helper.c mailing-list
xorg-x86-driver-dir-traversal(94746) vdb-entry
[oss-security] 20140711 Re: X.Org intel driver dev snapshots, backlight helper issue mailing-list