Evan Dandrea usb-creator 0.2.40

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:evan_dandrea:usb-creator:0.2.40:*:*:*:*:*:*:*

part: a version: 0.2.40 update: *

VendorEvan Dandrea (1e9fecfa-21af-54eb-80ea-dcf8aa0f43d0)
ProductUsb Creator (a3301413-e44c-530d-be78-a5d1b67253e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/ubuntu/usb-creator purl2cpe 2026-06-01 10:13:30.257858

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1063 vulnerable 2026-06-08 05:03:52.343791 Details available
usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
Published: 2013-10-03T21:00:00.000Z
Updated: 2024-09-16T19:25:57.621Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.