CVE-2011-2648: High severity kiwi vulnerability
Published Aug 23, 2011
·Updated
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file.
Affected Software
2 affected components
Marcus Schafer Kiwi<=3.74.1
Novell Suse Studio Onsite=1.1
Event History
Aug 23, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2648?
CVE-2011-2648 is classified as a high severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2011-2648?
To fix CVE-2011-2648, upgrade Kiwi to version 3.74.2 or later and ensure SUSE Studio is updated to version 1.1.4 or newer.
3
Who is affected by CVE-2011-2648?
CVE-2011-2648 affects users of Kiwi versions prior to 3.74.2 and SUSE Studio Onsite 1.1.
4
What kind of attacks can exploit CVE-2011-2648?
CVE-2011-2648 can be exploited by remote attackers to execute arbitrary code through modified files.
5
When was CVE-2011-2648 disclosed?
CVE-2011-2648 was disclosed in August 2011.