CVEvulnerability

CVE-2010-2246

5.1 MEDIUM Published 2011-05-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-05-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL.

Affected configurations

• feh project feh (<= 1.7) • feh project feh 0.5.0 • feh project feh 0.6.4 • feh project feh 0.7.0 • feh project feh 0.9.9 • feh project feh 1.1.0 • feh project feh 1.2.0 • feh project feh 1.2.1 • feh project feh 1.2.3 • feh project feh 1.2.5 • feh project feh 1.2.6 • feh project feh 1.2.7 • feh project feh 1.3.0 • feh project feh 1.3.1 • feh project feh 1.3.3 • feh project feh 1.3.5 • feh project feh 1.4 • feh project feh 1.4.1 • feh project feh 1.4.2 • feh project feh 1.4.3 • feh project feh 1.5 • feh project feh 1.6 • feh project feh 1.6.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References