CVE-2014-7209

01/תיאור (מקור, אנגלית)

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.

02/מוצרים מושפעים

debian: mime-support

03/קישורים10

• www.debian.org/security/2014/dsa-3114 Vendor Advisory
• www.debian.org/security/2014/dsa-3114 Vendor Advisory
• secunia.com/advisories/61892
• secunia.com/advisories/62079
• www.openwall.com/lists/oss-security/2014/12/31/8
• www.securityfocus.com/bid/71797
• exchange.xforce.ibmcloud.com/vulnerabilities/99570
• secunia.com/advisories/61892
• secunia.com/advisories/62079
• www.openwall.com/lists/oss-security/2014/12/31/8