CVE-2009-0068

Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox…

published January 7, 2009

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02164 · 82.1th percentile
Published
2009-01-07T19:00Z
EPSS history
Timeline
  • 07 JAN 19:00Z
    Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox…
    cvelistv5