CVE-2005-3149: Uim

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Uim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not properly handle the LIBUIM_VANILLA environment variable when a suid or sgid application is linked to libuim, such as immodule for Qt, which allows local users to gain privileges.

Affected products

• Uim Uim: up to and including 0.5.0

Published 2005-10-05. Last modified 2026-06-16.