comix: arbitrary code execution
| Package(s): | comix | CVE #(s): | CVE-2008-1568 | ||||||||||||
| Created: | April 9, 2008 | Updated: | April 28, 2008 | ||||||||||||
| Description: | From the NVD entry: comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs | ||||||||||||||
| Alerts: |
| ||||||||||||||