NetSight
IP …
medium5.1Public exploit code

CVE-2010-2246

feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL.

Affected products

VendorProductAffected versions
Feh ProjectFeh
through 1.7
Versions 0.5.0, 0.6.4, 0.7.0, 0.9.9, 1.1.0

Weakness classification

CWE-20

References