Main
Vulnerability Database
Exploits
ID:4332 - Exploit for Input validation error in feh - CVE-2010-2246
ID:4332 - Exploit for Input validation error in feh - CVE-2010-2246
Published: August 11, 2020
Vulnerability identifier: #VU45015
Vulnerability risk: Medium
CVE-ID: CVE-2010-2246
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
feh
feh
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL.
Remediation
Install update from vendor's website.