← Database

CVE-2007-5837

MEDIUM CVSS: 6.8 Published: 2007-11-05 Modified: 2026-06-16

Description

GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed.

Affected Platforms

Yarssr Yarssr

Weakness Type

CWE-94

References