CVE-2010-2809

CVE-2010-2809 affects Uzbl prior to 2010-08-05. The default Button2 binding fails to correctly use the @SELECTED_URI feature, allowing a user-assisted attacker to run arbitrary commands via a crafted HREF on an A element in an HTML document. The issue is described in the Fedora advisory for uzbl-...