CVE-2010-2809 The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote attackers to execute arbitrary commands....
MediumCVSS 6.8
EPSS 7.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| uzbl | <= 2010.04.03 | No fix listed |
| uzbl | = 2009.12.22 | No fix listed |
| uzbl | = 2010.01.04 | No fix listed |
References
- github.com
- github.com
- [oss-security] 20100806 CVE request: uzbl before 2010.08.05: User-assisted execution of arbitrary commands caused by faulty default config mailing-list
- [oss-security] 20100806 Re: CVE request: uzbl before 2010.08.05: User-assisted execution of arbitrary commands caused by faulty default config mailing-list
- 42297 vdb-entry
- www.uzbl.org
- www.uzbl.org patch
- bugzilla.redhat.com
- bugzilla.redhat.com
- uzbl-atselecteduri-command-execution(61011) vdb-entry