CVE-2011-1588: High severity Xfce Thunar vulnerability

Published Nov 14, 2019

Updated

Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error.

Affected Software

7 affected componentsFixes available

Xfce Thunar=1.2.1

Xfce Thunar=1.2.0

openSUSE openSUSE=11.4

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Debian Debian Linux=10.0

debian/thunar

4.16.8-14.18.4-14.20.2-1+deb13u14.20.7-1

Remediation

Patch Available

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1588

Event History

Nov 14, 2019

CVE Published

via MITRE·01:51 AM

Data Sourced

via MITRE·01:51 AM

DescriptionWeakness

Feb 17, 2026

Data Sourced

via Debian·11:24 PM

DescriptionAffected Software

Frequently Asked Questions

What is CVE-2011-1588?

CVE-2011-1588 is a vulnerability in Thunar before version 1.3.1 that could cause a crash when copying and pasting a file name with % format characters due to a format string error.

How severe is CVE-2011-1588?

CVE-2011-1588 has a severity level of high with a CVSS score of 7.

What is the affected software?

The affected software includes Thunar versions 1.2.1 and 1.2.0, Xfce Thunar, Opensuse versions 11.4, Debian Linux versions 8.0, 9.0, and 10.0.

How can I fix CVE-2011-1588?

To fix CVE-2011-1588, update Thunar to version 1.3.1 or higher.

Where can I find more information about CVE-2011-1588?

You can find more information about CVE-2011-1588 on the following references: [1] http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html [2] https://security-tracker.debian.org/tracker/CVE-2011-1588 [3] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1588