CVE-2011-1842

CVE-2011-1842 describes a critical vulnerability in the D-Bus backend of language-selector versions prior to 0.6.7, specifically affecting Ubuntu systems. This flaw allows local users to escalate privileges by injecting shell metacharacters into string arguments for the SetSystemDefaultLangEnv and SetSystemDefaultLanguageEnv functions due to insufficient input validation. With a CVSS score of 7.2, this vulnerability presents a high risk, enabling complete compromise of confidentiality, integrity, and availability from a local attack. While no active exploitation, public exploit code, or significant community discussion has been observed, the potential for privilege escalation makes it a serious concern for affected systems.