The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input.
Max CVSS
10.0
EPSS Score
0.37%
Published
2008-10-21
Updated
2008-12-03
Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service (crash) via (1) a long -cmd argument and (2) unspecified vectors related to "a bunch of potential string overflows."
Max CVSS
5.0
EPSS Score
1.27%
Published
2008-10-15
Updated
2009-02-10
2 vulnerabilities found