Search vulnerabilities

Results 2

Export CSV
CVE-2008-1568

comix: Command executions via improper shell escaping

comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs.

CVSS 2.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Products
CVE-2008-1796

Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products