GTK is the Gimp Toolkit, a freely available, open source graphics library program. When a program linked to GTK is run and creates a shared memory segment, the memory segment is created insecurely. The default implementation of GTK creates all shared memory segments with permissions of 0777. This design gives full read, write, and execute access for any data contained in the segment to all procesess. XMMS and Mozilla are two examples of applications vulnerable to this problem.
GTK is the Gimp Toolkit, a freely available, open source graphics library program. When a program linked to GTK is run and creates a shared memory segment, the memory segment is created insecurely. The default implementation of GTK creates all shared memory segments with permissions of 0777. This design gives full read, write, and execute access for any data contained in the segment to all procesess. XMMS and Mozilla are two examples of applications vulnerable to this problem.