Format string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in a password.
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Policykit | Freedesktop | * | 0.7 (including) |
| Policykit | Freedesktop | 0.6 (including) | 0.6 (including) |
| Policykit | Ubuntu | devel | * |
| Policykit | Ubuntu | upstream | * |