CVE-2014-5470: Command Injection
Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5470?
CVE-2014-5470 is considered a critical vulnerability as it allows for remote code execution due to improper handling of untrusted input.
How do I fix CVE-2014-5470?
To fix CVE-2014-5470, upgrade Actual Analyzer to a version released after August 29, 2014, that addresses this vulnerability.
What causes CVE-2014-5470?
CVE-2014-5470 is caused by the use of untrusted input in an eval operation, which enables the execution of arbitrary code.
Who is affected by CVE-2014-5470?
Users of Actual Analyzer versions up to and including 2014-08-29 are affected by CVE-2014-5470.
Is CVE-2014-5470 easily exploitable?
Yes, CVE-2014-5470 is easily exploitable, allowing attackers to execute arbitrary code using specially crafted input.