|
|
| |
|
| |
jhead: multiple vulnerabilities
| Package(s): | jhead |
CVE #(s): | CVE-2008-4639
CVE-2008-4640
CVE-2008-4641
|
| Created: | January 12, 2009 |
Updated: | March 5, 2009 |
| Description: |
From the Gentoo advisory:
* An insecure creation of a temporary file (CVE-2008-4639).
* A error when unlinking a file (CVE-2008-4640).
* Insufficient escaping of shell metacharacters (CVE-2008-4641).
A remote attacker could possibly execute arbitrary code by enticing a
user or automated system to open a file with a long filename or via
unspecified vectors. It is also possible to trick a user into deleting
or overwriting files.
|
| Alerts: |
|
( Log in to post comments)
|
|
|