CVE-2016-10081

CVE-2016-10081 affects Shutter up to version 0.93.1, enabling user-assisted remote command execution via a crafted image name during a Run a plugin action. Public writeups and advisories reference remote code execution and fixes in subsequent patches (e.g., openSUSE security update openSUSE-2017-...

CVE-2015-0854

Summary (CVE-2015-0854): The Shutter screenshot tool is affected up to version 0.93.1. The vulnerability resides in App/HelperFunctions.pm where the image name is mishandled during the “Show in Folder” action, allowing a user-assisted remote attacker to execute arbitrary commands. This is trigger...