CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Input Validation
Summary: ktsuss versions 1.4 and prior spawns the gtk interface to run as root. this can allow a local attacker to escalate privileges to root and use the "gtk_modules" environment variable to possibly execute arbitrary code.
Access Authentication: NONE
Access Complexity: UNKNOWN
Access Vector: UNKNOWN
Impact (C/I/A): NONE/NONE/NONE
Published Date: 2019-11-19
Last Modified Date: 2019-11-19