NVD

Id
47412  
Name
CVE-2009-0068  
Description
Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-01-07  
Modified Date
2009-02-10  
Seq
2009-0068  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
237242 47412 CVE-2009-0068 [oss-security] 20090106 Fwd: Using xdg-open in /etc/mailcap causes hole in Firefox (Demonstration/Exploit included)  View
237243 47412 CVE-2009-0068 33137  View
237244 47412 CVE-2009-0068 https://bugs.freedesktop.org/show_bug.cgi?id=19377  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42164 JVNDB-2009-003171 xdg-open における任意のコードを実行される脆弱性 xdg-open には、任意のコードを実行される脆弱性が存在します。 CVE-2009-0068 37499 CVE-2009-0068 47412 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003171.html 2009-01-03 2012-06-26 View