CVE-2014-7817: Improper Input Validation

The wordexp function in GNU C Library aka glibc 2.21 does not enforce the WRDENOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$..."...

DOC 0day-vulnerability warning-the black bar safety net

Author: wordexp This doc to use a certain difficulty: the poc are as follows: \rtf1\ansi\ansicpg409\deff0\deflang1033 \fonttbl\f0\fmodern\fprq6\fcharset0 DOTUM; \stylesheet\stylesheet\stylesheet\stylesheet\.........\ stylesheet................. hi.baidu.com/wordexp\par Error command: :u 30cffca0 ...