The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade x11-misc/xdg-utils. | Oct 30, 2017 | Feb 4, 2008 |
| Oracle Solaris | — | Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade desktop/xdg/xdg-utils to version 1.0.2-0.175.1.16.0.2.0 on Solaris 11.1Upgrade system/library/libdbus to version 1.2.28-0.175.1.16.0.2.0 on Solaris 11.1 | May 29, 2017 | Feb 4, 2008 |
| Suse | — | Upgrade xdg-utils-screensaverUpgrade xdg-utils | Feb 17, 2015 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub