- ------------------------------------------------------------------------- Debian Security Advisory DSA-3114-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso December 29, 2014 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : mime-support CVE ID : CVE-2014-7209 Timothy D. Morgan discovered that run-mailcap, an utility to execute programs via entries in the mailcap file, is prone to shell command injection via shell meta-characters in filenames. In specific scenarios this flaw could allow an attacker to remotely execute arbitrary code. For the stable distribution (wheezy), this problem has been fixed in version 3.52-1+deb7u1. For the upcoming stable distribution (jessie) and the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your mime-support packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
Debian: DSA-3114-1: mime-support security update
Timothy D. Morgan discovered that run-mailcap, an utility to execute programs via entries in the mailcap file, is prone to shell command injection via shell meta-characters in filenames. In specific scenarios this flaw could allow an attacker to remotely execute arbitrary code.
