opera -- kfmclient exec command execution vulnerability

2004-12-1200:00:00

vuxml.freebsd.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.045 Low

EPSS

Percentile

92.4%

JSON

Giovanni Delvecchio reports:

Opera for linux uses “kfmclient exec” as “Default
Application” to handle saved files. This could be used by
malicious remote users to execute arbitrary shell commands
on a target system.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchopera< 7.54.20050131UNKNOWN
FreeBSDanynoarchopera-devel< 7.54.20050131UNKNOWN
FreeBSDanynoarchlinux-opera< 7.54.20050131UNKNOWN