cbcvebase.
CVE-2014-9622
published 2015-01-21

CVE-2014-9622: Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute…

PriorityP341medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
3.26%
87.1th percentile
Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open.

Affected

6 ranges
VendorProductVersion rangeFixed in
debianxdg-utils< xdg-utils 1.1.0~rc1+git20111210-7.3 (bookworm)xdg-utils 1.1.0~rc1+git20111210-7.3 (bookworm)
freedesktopxdg-utils>= 0 < 1.1.0~rc1+git20111210-7.31.1.0~rc1+git20111210-7.3
freedesktopxdg-utils>= 0 < 1.1.0~rc1+git20111210-7.31.1.0~rc1+git20111210-7.3
freedesktopxdg-utils>= 0 < 1.1.0~rc1+git20111210-7.31.1.0~rc1+git20111210-7.3
freedesktopxdg-utils>= 0 < 1.1.0~rc1+git20111210-7.31.1.0~rc1+git20111210-7.3
gentooxdg-utils——

CVSS provenance

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_debian6.8MEDIUM
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.