Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c244-p864-46qg

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file.

Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file.

EPSS

Процентиль: 80%
0.01379
Низкий

Дефекты

CWE-94

Связанные уязвимости

ubuntu
почти 17 лет назад

Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file.

nvd
почти 17 лет назад

Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file.

debian
почти 17 лет назад

Interaction error in xdg-open allows remote attackers to execute arbit ...

EPSS

Процентиль: 80%
0.01379
Низкий

Дефекты

CWE-94