CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-4349

Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 37.3%

CVSS Severity

CVSS v2 Score 4.6

References

Products affected by CVE-2011-4349

Freedesktop » Colord » Version: Any

cpe:2.3:a:freedesktop:colord:*
Freedesktop » Colord » Version: 0.1.0

cpe:2.3:a:freedesktop:colord:0.1.0
Freedesktop » Colord » Version: 0.1.1

cpe:2.3:a:freedesktop:colord:0.1.1
Freedesktop » Colord » Version: 0.1.10

cpe:2.3:a:freedesktop:colord:0.1.10
Freedesktop » Colord » Version: 0.1.11

cpe:2.3:a:freedesktop:colord:0.1.11
Freedesktop » Colord » Version: 0.1.12

cpe:2.3:a:freedesktop:colord:0.1.12
Freedesktop » Colord » Version: 0.1.13

cpe:2.3:a:freedesktop:colord:0.1.13
Freedesktop » Colord » Version: 0.1.2

cpe:2.3:a:freedesktop:colord:0.1.2
Freedesktop » Colord » Version: 0.1.3

cpe:2.3:a:freedesktop:colord:0.1.3
Freedesktop » Colord » Version: 0.1.4

cpe:2.3:a:freedesktop:colord:0.1.4
Freedesktop » Colord » Version: 0.1.5

cpe:2.3:a:freedesktop:colord:0.1.5
Freedesktop » Colord » Version: 0.1.6

cpe:2.3:a:freedesktop:colord:0.1.6
Freedesktop » Colord » Version: 0.1.7

cpe:2.3:a:freedesktop:colord:0.1.7
Freedesktop » Colord » Version: 0.1.8

cpe:2.3:a:freedesktop:colord:0.1.8
Freedesktop » Colord » Version: 0.1.9

cpe:2.3:a:freedesktop:colord:0.1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-4349

Products

Pricing

Contact Us