DSA-5164: -1 exo -- security update

Published Jun 18, 2022

Updated

exo - security update

Other sources

It was discovered that exo, a support library for the Xfce desktop environment, would allow executing remote .desktop files. In some scenario, an attacker could use this vulnerability to trick an user an execute arbitrary code on the platform with the privileges of that user.

Affected Software

2 affected components

debian/exo

Event History

Jun 18, 2022

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-32278

Frequently Asked Questions

What does an attacker need to do to exploit this issue?

The attacker would need to trick a user into executing a remote .desktop file. Successful exploitation can result in arbitrary code execution with that user's privileges.

Who is exposed to the impact of a successful exploit?

Users of systems with the affected exo support library are exposed when they execute a malicious remote .desktop file. The resulting code runs with the privileges of the user who was tricked into opening it.

DSA-5164: -1 exo -- security update

Other sources

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What does an attacker need to do to exploit this issue?

Who is exposed to the impact of a successful exploit?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to do to exploit this issue?

Who is exposed to the impact of a successful exploit?