CVE-2007-5837

MEDIUM 6.8CVE-2007-5837 · Published 05/11/2007 · updated 16/06/2026

In short

CVE-2007-5837 is a MEDIUM (CVSS 6.8) vulnerability affecting yarssr (yarssr).
Chance of exploitation in the next 30 days (EPSS): 6.2%, higher than 93.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
yarssr yarssr	`= 0.2.2`	No fix yet

Description

GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed.

References

bugs.debian.org/cgi-bin/bugreport.cgi
secunia.com/advisories/27454 · Vendor Advisory
secunia.com/advisories/28671
debian.org/security/2008/dsa-1477
securityfocus.com/bid/26273 · Exploit
vupen.com/english/advisories/2007/3679
exchange.xforce.ibmcloud.com/vulnerabilities/38191

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free