What’s Vulnerable › Vulnerabilities
CVE-2008-0162
- Severity: high (CVSS 7.2 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2008-02-22 · updated 2026-06-16
- Weakness: CWE-264
Description
misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.
Affected products
- Sam Lantinga Splitvt: through 1.6.6
References
- http://secunia.com/advisories/29064
- http://secunia.com/advisories/29080
- http://secunia.com/advisories/29190
- http://security.gentoo.org/glsa/glsa-200803-05.xml
- http://www.debian.org/security/2008/dsa-1500
- http://www.securityfocus.com/bid/27936
- http://secunia.com/advisories/29064
- http://secunia.com/advisories/29080
- http://secunia.com/advisories/29190
- http://security.gentoo.org/glsa/glsa-200803-05.xml
- http://www.debian.org/security/2008/dsa-1500
- http://www.securityfocus.com/bid/27936
Get alerted when CVE-2008-0162 or the next vulnerability affects your stack