| Package | Affected versions | Patched versions |
|---|---|---|
| xdg-utils | = 1.0 |
Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free