Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0011
HistoryFeb 25, 2010 - 12:00 a.m.

CVE-2010-0011

2010-02-2500:00:00
ubuntu.com
ubuntu.com
7

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.01

Percentile

83.4%

The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the
run method of the Uzbl object, which allows remote attackers to execute
arbitrary commands via JavaScript code.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.01

Percentile

83.4%

Related for UB:CVE-2010-0011