yarssr: arbitrary code execution
| Package(s): | yarssr | CVE #(s): | CVE-2007-5837 | ||||
| Created: | January 28, 2008 | Updated: | January 30, 2008 | ||||
| Description: | From the NVD entry: GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed. | ||||||
| Alerts: |
| ||||||