CVE-2014-4910

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-24 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the interface name.

Affected products

Xf86-Video-Intel: 2.99.911

References

http://lists.x.org/archives/xorg-commit/2014-July/036840.html
http://osvdb.org/show/osvdb/108851
http://seclists.org/oss-sec/2014/q3/138
http://seclists.org/oss-sec/2014/q3/39
https://exchange.xforce.ibmcloud.com/vulnerabilities/94746
http://lists.x.org/archives/xorg-commit/2014-July/036840.html
http://osvdb.org/show/osvdb/108851
http://seclists.org/oss-sec/2014/q3/138
http://seclists.org/oss-sec/2014/q3/39
https://exchange.xforce.ibmcloud.com/vulnerabilities/94746

Get alerted when CVE-2014-4910 or the next vulnerability affects your stack