xdg-utils: command execution
| Package(s): | xdg-utils | CVE #(s): | CVE-2015-1877 | ||||||||
| Created: | February 23, 2015 | Updated: | February 25, 2015 | ||||||||
| Description: | From the Debian advisory:
Jiri Horner discovered a way to cause xdg-open, a tool that automatically opens URLs in a user's preferred application, to execute arbitrary commands remotely. | ||||||||||
| Alerts: |
| ||||||||||