CVE-2014-8873 A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary....
HighCVSS 10.0
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle openjdk | = 1.7.0 | No fix listed |
References
- DSA-3235 vendor-advisory
- DSA-3316 vendor-advisory
- [oss-security] 20150718 CVE-2014-8873 was fixed in DSA-3235-1 mailing-list
- 76019 vdb-entry