662 matches found
CVE-2009-0068
Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by...
CVE-2009-0068
CVE-2009-0068 affects the xdg-open component of xdg-utils. The flaw arises from an interaction error where a file sent with a dangerous MIME type but wrapped as a safe type is processed via automatic type detection, enabling remote attackers to execute arbitrary code (demonstrated by overwriting ...
Mozilla Firefox xdg-open mailcap文件远程代码执行漏洞
BUGTRAQ ID: 33137 Firefox是一款开放源码的WEB浏览器。 Firefox在调用/etc/mailcap中所定义的xdg-open工具之前没有正确地验证文件的mime-type，这可能导致执行任意代码。 Firefox使用mailcap检测默认的关联应用程序，对于音频或PDF文件等mime类型，Firefox使用xdg-open为默认的应用程序。由于xdg-open本身会检测mime类型（或要求桌面管理器检测），嵌入了伪造mime-type的页面会导致执行恶意程序。 Mozilla Firefox 3.0.5 厂商补丁： Mozilla -------...
CVE-2009-0068: Improper Control of Generation of Code
Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by...
pidgin security and bug fix update
2.5.2-6 - Automatically detect booleans to enable build features from dist tag - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain 2.5.2-2 - Upstream backports: 100: sametime-redirect-null crash 101: NetworkManager-improvement 102: no-password-in-dialog-if-not-remembering 103...
Gentoo Security Advisory GLSA 200801-21 (xdg-utils)
The remote host is missing updates announced in advisory GLSA 200801-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200801-21 (xdg-utils)
The remote host is missing updates announced in advisory GLSA 200801-21. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 8 : centerim-4.22.4-1.fc8 (2008-2867)
This update fixes the CVE-2008-1467 security issue by disabling the 'actions' configuration altogether. Furthermore the default web browser is no longer configurable in CenterIM. The links get open in the default web browser configured, using xdg-utils. This release adds support for new versions ...
Fedora 7 : centerim-4.22.4-1.fc7.1 (2008-2869)
This update fixes the CVE-2008-1467 security issue by disabling the 'actions' configuration altogether. Furthermore the default web browser is no longer configurable in CenterIM. The links get open in the default web browser configured, using xdg-utils. There won't be any update for centericq. Al...
openSUSE 10 Security Update : xdg-utils (xdg-utils-4983)
xdg-open and xdg-email didn't properly check their arguments. Therefore e.g. URLs passed to those programs could contain shell code that got executed CVE-2008-0386. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
CVE-2008-0386
Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to 1 xdg-open or 2 xdg-email...
Code injection
Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to 1 xdg-open or 2 xdg-email...
CVE-2008-0386
Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to 1 xdg-open or 2 xdg-email...
CVE-2008-0386
Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to 1 xdg-open or 2 xdg-email...
CVE-2008-0386
CVE-2008-0386 affects xdg-utils
CVE-2008-0386
Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to 1 xdg-open or 2 xdg-email...
CVE-2008-0386: Improper Input Validation
Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to 1 xdg-open or 2 xdg-email...
GLSA-200801-21 : Xdg-Utils: Arbitrary command execution
The remote host is affected by the vulnerability described in GLSA-200801-21 Xdg-Utils: Arbitrary command execution Miroslav Lichvar discovered that the 'xdg-open' and 'xdg-email' shell scripts do not properly sanitize their input before processing it. Impact : A remote attacker could entice a us...
[ GLSA 200801-21 ] Xdg-Utils: Arbitrary command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200801-21 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...