CVE-2007-5837

Published: 5 November 2007

GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed.

Priority

Status

Package	Release	Status
yarssr Launchpad, Ubuntu, Debian	dapper	Released (0.2.2-1ubuntu0.6.06)
	edgy	Released (0.2.2-1ubuntu0.6.10)
	feisty	Released (0.2.2-1ubuntu0.7.04)
	gutsy	Released (0.2.2-1ubuntu1.1)
	upstream	Released (0.2.2-3)

References

https://www.cve.org/CVERecord?id=CVE-2007-5837
NVD
Launchpad
Debian

Bugs

https://bugs.launchpad.net/ubuntu/+source/yarssr/+bug/162351

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›