misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges.
Score: 0.0
Priority: Unclassified
Score: 0.00051
Percentile:
0.15901
CVSS v2 Score: 7.2
Severity: