CVE-2010-4833

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.00%

Published

Sep 6, 2011

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than CVE-2010-4831.

Weaknesses (CWE)

CWE-426

Affected Products (1)

gnome · gtk (up to 2.24.0)vulnerable

References (6)

http://git.gnome.org/browse/gtk+/commit/modules/engines/ms-windows/xp_theme.c?h=gtk-2-24&id=d6e11a97e318158f5d210a0476870dfe14ed95e6

Patch

http://secunia.com/advisories/45815

Broken Link

http://www.securityfocus.com/bid/49449

Broken LinkThird Party AdvisoryVDB Entry

http://git.gnome.org/browse/gtk+/commit/modules/engines/ms-windows/xp_theme.c?h=gtk-2-24&id=d6e11a97e318158f5d210a0476870dfe14ed95e6

Patch

http://secunia.com/advisories/45815

KEV Catalog EPSS Scores Vendors All CVEs