3 matches found
AZL-39933 CVE-2024-32487 affecting package less for versions less than 590-4
less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the...
The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve improper handling of the new line in the file name. This allows attackers to bypass security restrictions and execute arbitrary code.
The vulnerability in Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird is related to incorrect handling of a new line in the file name. Exploiting this vulnerability allows an attacker to bypass security restrictions and execute arbitrary code...
