CVE-2011-1709: Gnome Gdm

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type.

Affected products

• Gnome Gdm: version 1.0 only; version 2.0 only; version 2.2 only; version 2.3 only; version 2.4 only; version 2.5 only; …

Published 2011-06-14. Last modified 2026-06-16.