DEBIAN-CVE-2025-44906

jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...

UBUNTU-CVE-2025-44906

jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...

jhead 资源管理错误漏洞

jhead is a command line program by the individual developer Matthias Wandel. A security vulnerability exists in jhead version v3.08, which stems from a post-release reuse of the ProcessFile function in the jhead.c file, which could lead to the execution of arbitrary code...

CVE-2008-4641

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...

CVE-2008-4640

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which 1 a final "z" character is replaced by a "t" character or 2 a final "t" character is replaced by a "z" character...

CVE-2008-4639

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

Arbitrary file deletion

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

Input validation

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which 1 a final "z" character is replaced by a "t" character or 2 a final "t" character is replaced by a "z" character...

CVE-2008-4639

CVE-2008-4639 affects jhead up to version 2.84, where jhead.c allows local users to overwrite arbitrary files via a symlink attack on a temporary file. This local, low‑complexity exploit can lead to partial impacts on confidentiality, integrity, and availability. The linked vendor advisories/patc...

CVE-2008-4640

The CVE-2008-4640 issue affects jhead up to version 2.84, where DoCommand() could delete arbitrary files when the input filename is manipulated (replacing a trailing z with t or vice versa). Several advisories (openSUSE/SUSE jhead-399, Fedora 2009-1824/1776, Mandriva MDVSA-2009:041) confirm the v...

CVE-2008-4640

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which 1 a final "z" character is replaced by a "t" character or 2 a final "t" character is replaced by a "z" character...

CVE-2008-4639

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...