UBUNTU-CVE-2022-45062

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

CVE-2022-45062

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

CVE-2022-45062

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

Xfce 参数注入漏洞

Xfce is a desktop environment by the individual developer Olivier Fourdan for Unix and Unix-like operating systems such as Linux and FreeBSD. Xfce A parameter injection vulnerability exists in Xfce xfce4-settings versions prior to 4.16.4, 4.17.x through 4.17.1, which stems from escaping character...

CVE-2022-45062

CVE-2022-45062 affects xfce4-settings, specifically the xfce4-mime-helper component, with versions before 4.16.4 and 4.17.x before 4.17.1 vulnerable to argument injection. Public details indicate exploitation via xdg-open, enabling code execution on user machines (via crafted links in PDFs). Reme...

CVE-2022-45062

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper...

PT-2022-27396 · Xfce +3 · Xfce4-Mime-Helper +4

Name of the Vulnerable Software and Affected Versions: xfce4-settings versions 4.16.3 and earlier, 4.17.x before 4.17.1 Description: There is an argument injection issue in the xfce4-mime-helper from the xfce4-settings package. This issue allows for argument injection, which can potentially be...

FreeBSD : XFCE tumbler -- Vulnerability in the GStreamer plugin (75c073cc-1a1d-11ed-bea0-48ee0c739857)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 75c073cc-1a1d-11ed-bea0-48ee0c739857 advisory. - The XFCE project reports: Added mime type check to the gst-thumbnailer plugin to fix an undisclosed...

XFCE tumbler -- Vulnerability in the GStreamer plugin

The XFCE project reports: Added mime type check to the gst-thumbnailer plugin to fix an undisclosed vulnerability...

The vulnerability of the XFCE desktop environment application library allows a hacker to execute arbitrary code.

The vulnerability of the XFCE desktop environment application library is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created .desktop file from a remote location...

Debian: Security Advisory (DLA-3056-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-3056-1 : exo - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3056 advisory. - XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server. CVE-2022-32278 Note that Nessus ha...

Debian DSA-5164-1 : exo - security update

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5164 advisory. It was discovered that exo, a support library for the Xfce desktop environment, would allow executing remote .desktop files. In some scenario, an attacker could use...

CVE-2022-32278

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server...

CVE-2022-32278

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server...

CVE-2022-32278

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server...

DEBIAN-CVE-2022-32278

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server...

Design/Logic Flaw

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server...

CVE-2022-32278

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server...

UBUNTU-CVE-2022-32278

XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server...