CVE-2010-2809

The default configuration of the binding in Uzbl before 2010.08.05 does not properly use the @SELECTEDURI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document...

CVE-2010-2809

The default configuration of the binding in Uzbl before 2010.08.05 does not properly use the @SELECTEDURI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document...

CVE-2010-2809

CVE-2010-2809 affects Uzbl prior to 2010-08-05. The default Button2 binding fails to correctly use the @SELECTED_URI feature, allowing a user-assisted attacker to run arbitrary commands via a crafted HREF on an A element in an HTML document. The issue is described in the Fedora advisory for uzbl-...