← Database

CVE-2008-0386

MEDIUM CVSS: 6.8 Published: 2008-02-04 Modified: 2026-06-16

Description

Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email.

Affected Platforms

Gentoo Xdg-UtilsMandrakesoft Mandrake Linux

Weakness Type

CWE-20

References