CVE-2010-2809

The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote…

published August 19, 2010

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07345 · 94.3th percentile
Published
2010-08-19T20:00Z
EPSS history
Timeline
  • 19 AUG 20:00Z
    The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI feature, which allows user-assisted remote…
    cvelistv5