175 matches found
USN-2453-1 mime-support vulnerability
Timothy D. Morgan discovered that the run-mailcap tool incorrectly filtered certain shell metacharacters in filenames. If a user or automated system were tricked into opening a file with a specially-crafted filename, a remote attacker could possibly execute arbitrary code...
Code injection
run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...
UBUNTU-CVE-2014-7209
run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...
mime-support Package 'run-mailcap' Command Injection Vulnerability
run-mailcap is a tool that executes a program from items in a mailcap file. run-mailcap fails to properly handle shell metacharacters in filenames, allowing an attacker to exploit a vulnerability for command injection attacks that can execute arbitrary shell commands...
mime-support shell characters injection
run-mailcap special shell characters injection...
[SECURITY] [DSA 3114-1] mime-support security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3114-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 29, 2014 http://www.debian.org/security/faq -...
DSA-3114-1 mime-support - security update
Bulletin has no description...
Lynx 2.8 '.mailcap' and '.mime.type' Files Local Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31917/info Lynx is prone to a local code-execution vulnerability. Successful exploits may allow attackers to execute arbitrary code within the context of the user running the affected application. Versions prior to Lynx...
Slackware Advisory SSA:2009-033-01 xdg-utils
The remote host is missing an update as announced via advisory SSA:2009-033-01. OpenVAS Vulnerability Test $Id: esoftslkssa200903301.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Mandriva Update for mailcap MDVA-2010:049 (mailcap)
Check for the Version of mailcap OpenVAS Vulnerability Test Mandriva Update for mailcap MDVA-2010:049 mailcap Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
MDVA-2010:049 : mailcap
It was discovered that the mailcap package needed by firefox wasn't provided with MDVA-2010:015. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. This advisory addresses these problems. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patc...
CentOS Update for lynx CESA-2008:0965 centos3 x86_64
Check for the Version of lynx OpenVAS Vulnerability Test CentOS Update for lynx CESA-2008:0965 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
CentOS Update for lynx CESA-2008:0965 centos3 i386
Check for the Version of lynx OpenVAS Vulnerability Test CentOS Update for lynx CESA-2008:0965 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Slackware 12.2 / current : xdg-utils (SSA:2009-033-01)
New xdg-utils packages are available for Slackware 12.2 and -current to fix security issues. Applications that use /etc/mailcap could be tricked into running an arbitrary script through xdg-open, and a separate flaw in xdg-open could allow the execution of arbitrary commands embedded in untrusted...
xdg-utils
New xdg-utils packages are available for Slackware 12.2 and -current to fix security issues. Applications that use /etc/mailcap could be tricked into running an arbitrary script through xdg-open, and a separate flaw in xdg-open could allow the execution of arbitrary commands embedded in untrusted...
Mozilla Firefox xdg-open mailcap文件远程代码执行漏洞
BUGTRAQ ID: 33137 Firefox是一款开放源码的WEB浏览器。 Firefox在调用/etc/mailcap中所定义的xdg-open工具之前没有正确地验证文件的mime-type，这可能导致执行任意代码。 Firefox使用mailcap检测默认的关联应用程序，对于音频或PDF文件等mime类型，Firefox使用xdg-open为默认的应用程序。由于xdg-open本身会检测mime类型（或要求桌面管理器检测），嵌入了伪造mime-type的页面会导致执行恶意程序。 Mozilla Firefox 3.0.5 厂商补丁： Mozilla -------...
Lynx 2.8 - .mailcap.mime.type Local Code Execution
Lynx 2.8 - .mailcap.mime.type Local Code Execution source: https://www.securityfocus.com/bid/31917/info Lynx is prone to a local code-execution vulnerability. Successful exploits may allow attackers to execute arbitrary code within the context of the user running the affected application. Version...
Lynx 2.8 - '.mailcap'/'.mime.type' Local Code Execution
source: https://www.securityfocus.com/bid/31917/info Lynx is prone to a local code-execution vulnerability. Successful exploits may allow attackers to execute arbitrary code within the context of the user running the affected application. Versions prior to Lynx 2.8.6rel.4 are affected. .mime.type...
Lynx '.mailcap'和'.mime.type'文件本地代码执行漏洞
BUGTRAQ ID: 31917 CVE ID：CVE-2006-7234 CNCVE ID：CNCVE-20087234 Lynx是一款基于文本的浏览器。 Lynx处理'.mailcap'和'.mime.type'文件存在问题，本地攻击者可以利用漏洞以应用程序权限执行任意指令。 Lynx从当前目录中打开mailcap和mime类型定义文件，如果用户可以在特殊构建的目录中诱使用户运行lynx，攻击者可以控制目录以运行lynx用户权限执行任意代码。 University of Kansas Lynx 2.8.6 dev9 University of Kansas Lynx 2.8.6...
