CVE-2014-7209: Command Injection
Published Jan 6, 2015
·Updated
run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.
Affected Software
1 affected component
Debian mime-support<=3.52-1
Event History
Jan 6, 2015
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-7209?
CVE-2014-7209 is considered a high severity vulnerability due to its potential for arbitrary command execution.
2
How do I fix CVE-2014-7209?
To fix CVE-2014-7209, update the mime-support package to version 3.52-1+deb7u1 or later.
3
What software is affected by CVE-2014-7209?
CVE-2014-7209 affects Debian mime-support versions before 3.52-1+deb7u1.
4
What are the potential impacts of CVE-2014-7209?
The potential impacts of CVE-2014-7209 include unauthorized command execution by attackers.
5
Who is at risk from CVE-2014-7209?
Users running vulnerable versions of the Debian mime-support package are at risk from CVE-2014-7209.