mime-support vulnerability

2015-01-0700:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.7

Confidence

High

EPSS

0.007

Percentile

80.3%

JSON

Releases

Ubuntu 14.10
Ubuntu 14.04 ESM
Ubuntu 12.04
Ubuntu 10.04

Packages

mime-support - MIME support programs

Details

Timothy D. Morgan discovered that the run-mailcap tool incorrectly filtered
certain shell metacharacters in filenames. If a user or automated system
were tricked into opening a file with a specially-crafted filename, a
remote attacker could possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchmime-support< 3.55ubuntu1.1UNKNOWN
Ubuntu14.04noarchmime-support< 3.54ubuntu1.1UNKNOWN
Ubuntu12.04noarchmime-support< 3.51-1ubuntu1.1UNKNOWN
Ubuntu10.04noarchmime-support< 3.48-1ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.10	noarch	mime-support	< 3.55ubuntu1.1	UNKNOWN
Ubuntu	14.04	noarch	mime-support	< 3.54ubuntu1.1	UNKNOWN
Ubuntu	12.04	noarch	mime-support	< 3.51-1ubuntu1.1	UNKNOWN
Ubuntu	10.04	noarch	mime-support	< 3.48-1ubuntu1.1	UNKNOWN