VYPR
Unrated severityNVD Advisory· Published Oct 3, 2013· Updated Jun 16, 2026

CVE-2013-1066

CVE-2013-1066

Description

language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • cpe:2.3:a:ubuntu_developers:language-selector:0.110:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:ubuntu_developers:language-selector:0.110:*:*:*:*:*:*:*
    • cpe:2.3:a:ubuntu_developers:language-selector:0.79.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ubuntu_developers:language-selector:0.79.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ubuntu_developers:language-selector:0.79.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ubuntu_developers:language-selector:0.79:*:*:*:*:*:*:*
    • cpe:2.3:a:ubuntu_developers:language-selector:0.90:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*+ 2 more
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*
  • Range: >=0.79.0, <0.79.4; >=0.90.0, <0.90.1; >=0.110.0, <0.110.1

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.