Debian/xdg-utils: unknown
Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open.
Action: Upgrade xdg-utils to 1.1.0~rc1+git20111210-7.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.0~rc1+git20111210-7.3 | - |
Fixed versions
| 1.1.0~rc1+git20111210-7.3 |
Sources
- osv: DEBIAN-CVE-2014-9622#Debian:13/xdg-utils
- https://security-tracker.debian.org/tracker/CVE-2014-9622
published · modified · JSON