CVE-2011-1828: Evan Dandrea USB-Creator

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbitrary unmount operations via the UnmountFile method in a dbus-send command.

Affected products

• Evan Dandrea USB-Creator: up to and including 0.2.28; version 0.1 only; version 0.1.1 only; version 0.1.2 only; version 0.1.3 only; version 0.1.4 only; …

Published 2011-05-16. Last modified 2026-06-16.