11 matches found
EUVD-2011-1047
Malware in sbrugna...
EUVD-2010-2258
Malware in sbrugna...
EUVD-2011-0717
Malware in sbrugna...
EUVD-2017-16850
Malware in sbrugna...
SUSE CVE-2017-7875
In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free...
GLSA-201110-08 : feh: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201110-08 feh: Multiple vulnerabilities Multiple vulnerabilities have been discovered in feh. Please review the CVE identifiers referenced below for details. Impact : A malicious entity might entice a user to visit a URL using the...
CVE-2010-2246
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL...
CVE-2010-2246
CVE-2010-2246 affects feh prior to 1.8, where enabling --wget-timestamp allows remote command execution via shell metacharacters in a URL. The issue is confirmed in multiple OpenVAS/Gentoo/Gentoo GLSA entries, with CVSS v2 base score 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P). Mitigation documented in GLSA...
CVE-2011-1031
The fehuniquefilename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh temporary file, a different vulnerability than CVE-2011-0702...
UBUNTU-CVE-2011-1031
The fehuniquefilename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh temporary file, a different vulnerability than CVE-2011-0702...
CVE-2011-1031
The provided documents confirm a local privilege/filenaming issue in feh (CVE-2011-1031) affecting feh 1.11.2 and earlier, due to a symlink race in feh_unique_filename that can let a local user create/overwrite files under /tmp/feh_. Exploitation is local and does not require authentication. The ...