Vulnerability CVE-2010-4833 - CERT Civis.Net

Vulnerability Name:

CVE-2010-4833 (CCN-69663)

Assigned:

2011-09-02

Published:

2011-09-02

Updated:

2023-08-03

Summary:

CVSS v3 Severity:

9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.9 Medium (CCN CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C)
5.1 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2010-4833

Source: CCN
Type: GTK+ Repository
GTK+

Source: cve@mitre.org
Type: Patch
cve@mitre.org

Source: CCN
Type: SA45815
GTK+ Insecure Library Loading Vulnerability

Source: cve@mitre.org
Type: Broken Link
cve@mitre.org

Source: CCN
Type: The GTK+ Project Web site
GTK+

Source: CCN
Type: BID-49449
GTK+ Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

Source: cve@mitre.org
Type: Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org

Source: XF
Type: UNKNOWN
gtk-xptheme-privilege-escalation(69663)

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:gtk:gtk+:2.4.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.18.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.0.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.0.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.0.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.0.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.0.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.0.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.0.8:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.0.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.0.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.2.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.2.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.0.9:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.2.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.21.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.21.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.21.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.21.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.21.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.21.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.21.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.20.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.20.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.19.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.19.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.19.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.19.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.19.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.19.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.19.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.19.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.18.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.18.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.18.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.18.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.18.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.18.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.18.9:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.18.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.18.8:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.8:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.9:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.10:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.17.11:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.16.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.16.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.16.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.16.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.16.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.16.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.16.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.15.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.15.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.15.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.15.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.15.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.15.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.14.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.14.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.14.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.14.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.14.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.14.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.14.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.14.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.13.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.13.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.13.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.13.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.13.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.13.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.13.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.13.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.8:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.9:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.10:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.11:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.12.12:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.11.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.11.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.11.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.11.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.11.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.11.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.11.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.8:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.9:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.10:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.11:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.12:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.13:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.10.14:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.9.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.9.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.9.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.9.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.9.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.8:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.9:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.10:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.11:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.12:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.13:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.14:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.15:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.16:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.17:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.18:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.19:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.8.20:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.7.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.7.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.7.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.7.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.7.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.7.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.6.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.6.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.6.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.6.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.6.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.6.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.6.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.6.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.6.8:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.6.9:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.6.10:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.5.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.5.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.5.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.5.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.5.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.5.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.5.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.8:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.9:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.10:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.11:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.12:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.13:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.4.14:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.3.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.3.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.3.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.3.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.3.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.3.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.3.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.2.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.2.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.1.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.1.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.1.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.1.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.1.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.1.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.3.9:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.3.13:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.3.15:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.3.10:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.3.12:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.3.14:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.3.11:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.2.8:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.2.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.2.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.2.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.2.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.2.4:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.2.5:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.2.6:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.2.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.2.9:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.2.10:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.1.12:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:1.1.15:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.23.3:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.23.2:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.23.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.23.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.21.7:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.21.8:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.22.0:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.22.1:*:*:*:*:*:*:*

OR cpe:/a:gtk:gtk+:2.23.90:*:*:*:*:*:*:*

Denotes that component is vulnerable