CVE-2014-7209
Summary
| CVE | CVE-2014-7209 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2015-01-06 15:59:00 UTC |
| Updated | 2017-09-08 01:29:00 UTC |
| Description | run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. |
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Application |
Debian |
Mime-support |
All |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| Debian -- Security Information -- DSA-3114-1 mime-support |
DEBIAN |
www.debian.org |
Vendor Advisory |
| Security Advisory SA61892 - Debian update for mime-support - Secunia |
SECUNIA |
secunia.com |
|
| About Secunia Research | Flexera |
SECUNIA |
secunia.com |
|
| oss-security - Command Injection in mime-support/run-mailcap (CVE-2014-7209) |
MLIST |
www.openwall.com |
|
| IBM X-Force Exchange |
XF |
exchange.xforce.ibmcloud.com |
|
| mime-support Package 'run-mailcap' CVE-2014-7209 Command Injection Vulnerability |
BID |
www.securityfocus.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 591406 Siemens SIMATIC S7-1500 CPU GNU/Linux subsystem Multiple Vulnerabilities (SSB-439005, ICSA-22-104-13)