Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2008-4575

jhead buffer overflow

Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service (crash) via (1) a long -cmd argument and (2) unspecified vectors related to "a bunch of potential string overflows."

CVSS 2.0 · 5.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Sentex
Products
Jhead
CVE-2008-4639

jhead: insecure temporary file usage

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Sentex
Products
Jhead
CVE-2008-4640

jhead: arbitrary file deletion

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which (1) a final "z" character is replaced by a "t" character or (2) a final "t" character is replaced by a "z" character.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Sentex
Products
Jhead
CVE-2008-4641

jhead: command exection caused by incorrect handling of the shell escapes

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input.

CVSS 2.0 · 10.0 Critical EPSS 2.2% KEV · Not listed
Vendors
Sentex
Products
Jhead