1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
Candidate: CVE-2010-0011
PublicDate: 2010-02-25
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0011
http://www.uzbl.org/news.php?id=22
Description:
The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the
run method of the Uzbl object, which allows remote attackers to execute
arbitrary commands via JavaScript code.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
Patches_uzbl:
upstream_uzbl: needs-triage
dapper_uzbl: DNE
hardy_uzbl: DNE
intrepid_uzbl: DNE
jaunty_uzbl: DNE
karmic_uzbl: DNE
lucid_uzbl: not-affected (0.0.0git.20100105-1)
maverick_uzbl: ignored (reached end-of-life)
natty_uzbl: ignored (reached end-of-life)
oneiric_uzbl: ignored (reached end-of-life)
precise_uzbl: not-affected (0.0.0git.20100105-1)
quantal_uzbl: ignored (reached end-of-life)
raring_uzbl: ignored (reached end-of-life)
saucy_uzbl: ignored (reached end-of-life)
trusty_uzbl: not-affected (0.0.0git.20100105-1)
devel_uzbl: not-affected (0.0.0git.20100105-1)
|