7.8
CVE-2007-3770
- EPSS 2.24%
- Veröffentlicht 15.07.2007 21:30:00
- Zuletzt bearbeitet 16.06.2026 22:42:41
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as demonstrated using the "Open Link" functionality.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Os-cillation ≫ Xfce Terminal Version0.2.6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.24% | 0.805 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 8.6 | 7.8 |
AV:N/AC:M/Au:N/C:C/I:P/A:N
|
http://bugs.gentoo.org/show_bug.cgi?id=184886
http://osvdb.org/38082
http://secunia.com/advisories/26037
http://secunia.com/advisories/26392
http://secunia.com/advisories/26418
http://secunia.com/advisories/27374
http://security.gentoo.org/glsa/glsa-200708-07.xml
http://www.debian.org/security/2007/dsa-1393
http://www.securityfocus.com/bid/24889
http://www.ubuntu.com/usn/usn-497-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/35379