CVE

Id
96769  
CVE No.
CVE-2016-9949  
Status
Candidate  
Description
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins with a "{". This allows remote attackers to execute arbitrary Python code.  
Phase
Assigned (20161214)  
Votes
None (candidate not yet proposed)  
Comments