Unscored severity · published Jul 24, 2014
CVE-2014-4910
Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a
–
CVSS
1%
EPSS
No
On KEV
Description
Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the interface name.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XF
Xf86-video-intel · X
2.99.911 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4910
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4910
lists.x.org
http://lists.x.org/archives/xorg-commit/2014-July/036840.html
osvdb.org
http://osvdb.org/show/osvdb/108851
seclists.org
http://seclists.org/oss-sec/2014/q3/138
seclists.org
http://seclists.org/oss-sec/2014/q3/39
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/94746