Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AccountsService ‘user_change_icon_file_authorized_cb()’函数本地文件泄露漏洞
Vulnerability Description
AccountsService 0.6.22之前版本中的user_change_icon_file_authorized_cb()’函数中存在本地文件泄露漏洞。攻击者可利用该漏洞在运行受影响应用程序的计算机的本地文件中获取敏感信息，且有助于进一步攻击。
CVSS Information
N/A
Vulnerability Type
N/A