CVE-2015-1877

The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote…

published June 2, 2021

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03214 · 88.1th percentile
Published
2021-06-02T16:34Z
EPSS history
Timeline
  • 02 JUN 16:34Z
    The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote…
    cvelistv5