CVE-2010-0011
- State
- Published
- Severity
- Not scored
- Published
- Feb 25, 2010
- Updated
- Aug 7, 2024
- Reserved
- Dec 14, 2009
Description
The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [uzbl-dev] 20100102 Fw: Uzbl: security issuemailing-list
- http://github.com/Dieterbe/uzbl/commit/1958b52d41cba96956dc1995660de49525ed1047
- http://github.com/Dieterbe/uzbl/downloads
- http://www.uzbl.org/news.php?id=22
- uzbl-evaljs-command-execution(56612)vdb-entry
- [oss-security] 20100106 CVE request - uzbl remote code executionmailing-list
- [oss-security] 20100106 Re: CVE request - uzbl remote code executionmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.