PT-2010-4304 · Uzbl · Uzbl

Vincent Danen · Published 2010-08-19 · Updated 2017-08-17 · CVE-2010-2809

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Uzbl versions prior to 2010.08.05

Description The issue concerns the default configuration of the Button2 binding in Uzbl, which does not properly utilize the @SELECTED URI feature. This allows remote attackers to execute arbitrary commands with user assistance, by crafting the HREF attribute of an A element in an HTML document.

Recommendations For versions prior to 2010.08.05, update to a version that properly uses the @SELECTED URI feature to mitigate the risk of arbitrary command execution.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2010-2809

Affected Products

Uzbl

References · 12

• 🔥 https://exploit-db.com/exploits/34426 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-2809 · Security Note
• http://uzbl.org/news.php?id=29 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61011 · Note
• http://marc.info/?l=oss-security&m=128111994317381&w=2 · Note
• http://securityfocus.com/bid/42297 · Note
• http://marc.info/?l=oss-security&m=128111493509265&w=2 · Note
• http://github.com/Dieterbe/uzbl/commit/9cc39cb5c9396be013b5dc2ba7e4b3eaa647e975 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=621964 · Note
• http://github.com/pawelz/uzbl/commit/342f292c27973c9df5f631a38bd12f14a9c5cdc2 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=621965 · Note
• http://uzbl.org/bugs/index.php?do=details&task_id=240 · Note