CVE-2012-1166

CRITICAL

The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.

Affects 2 products across 1 vendor.

BCS7.78
CVSS 2.010.0
EPSS4.8%
Percentile91th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
CWE Weakness Definitions
CWE-78: OS Command Injection

Attacker injects OS commands through application inputs passed to system() or equivalent calls, leading to arbitrary command execution.

Related Attack Patterns (CAPEC)
CAPEC-43 Exploiting Multiple Input Interpretation Layers
via CWE-78
CAPEC-108 Command Line Execution through SQL Injection
via CWE-78
CAPEC-6 Argument Injection
via CWE-78
CAPEC-15 Command Delimiters
via CWE-78
CAPEC-88 OS Command Injection
via CWE-78

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ SAGE Intelligence — CITED Relevance Research Team

This vulnerability was disclosed in 2014. A critical vulnerability affects Canonical systems (CVE-2012-1166). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2014-GLOBAL-023591-C • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2012-1166?
This vulnerability was disclosed in 2014. A critical vulnerability affects Canonical systems (CVE-2012-1166). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2012-1166?
CVE-2012-1166 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 4.8%.
Is CVE-2012-1166 actively exploited?
No confirmed active exploitation of CVE-2012-1166 as of 2026-05-30.
How do I remediate CVE-2012-1166?
Priority: MEDIUM.
What systems are affected by CVE-2012-1166?
CVE-2012-1166 affects: Canonical, Canonical.
Vulnerability Details
CVE IDCVE-2012-1166
BSIDBS-2014-GLOBAL-023591-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published2014-05-21
Last Modified2026-05-06
ICS Relevance15%
Weakness (CWE)
OS Command Injection
SourceNVD
Official Description

The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via the KP_RETURN keybinding, which launches a terminal window. CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C.

Exploitation Likelihood: LOW

Affected Products
VendorProductFixed Version
Canonical Ubuntu Linux —
Canonical Ltsp Display Manager —
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: August 2026 | Threat Age: 4455 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash0ec4e8b40f39c3483b9d60a775fae84ea09c801be24f5371e12a69fb2a44751fbdef46d5ae605c18e6a9ae54c1c16155ad6219569bb32d38430fa3e5e639566f
Related CVEs affecting Canonical
CVE-2012-0444 10.0 Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 ... CVE-2004-1018 10.0 Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypa... CVE-2004-1063 10.0 PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multit... CVE-2007-2442 10.0 The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb... CVE-2012-4212 10.0 Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozill...
View all Canonical CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →