29 matches found
Fedora 7 : comix-3.6.4-6.fc7 (2008-2993)
Several security flaws are reported against comix 3.6.4. One issue is that comix uses os.popen to execute external commands without handling filenames properly. This may allow malicios users to execute arbitrary commands by opening some files with crafted names. This issue is now identified as...
[SECURITY] Fedora 7 Update: comix-3.6.4-6.fc7
Comix is a user-friendly, customizable image viewer. It is specifically designed to handle comic books, but also serves as a generic viewer. It reads images in ZIP, RAR or tar archives also gzip or bzip2 compressed as well as plain image files. It is written in Python and uses GTK+ through the...
[SECURITY] Fedora 8 Update: comix-3.6.4-6.fc8
Comix is a user-friendly, customizable image viewer. It is specifically designed to handle comic books, but also serves as a generic viewer. It reads images in ZIP, RAR or tar archives also gzip or bzip2 compressed as well as plain image files. It is written in Python and uses GTK+ through the...
Command injection
comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs...
CVE-2008-1568
comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs...
CVE-2008-1568
comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs...
CVE-2008-1568
Summary: CVE-2008-1568 affects the Comix GTK comic viewer. The vulnerability arises when filenames containing shell metacharacters are passed to the external tools rar, unrar, or jpegtran, allowing arbitrary command execution. A related issue (CVE-2008-1796) concerns directory name predictability...
