Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

feh project feh vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2017-7875
In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.
Feh Project Feh
NA
CVE-2010-2246
feh prior to 1.8, when the --wget-timestamp option is enabled, might allow remote malicious users to execute arbitrary commands via shell metacharacters in a URL.
Feh Project Feh 1.2.6Feh Project Feh 1.2.5Feh Project Feh 1.2.3Feh Project Feh 1.2.1Feh Project Feh 1.6Feh Project Feh 1.4.3Feh Project Feh 1.3.1Feh Project Feh 1.2.7Feh Project Feh 1.2.0Feh Project Feh 0.9.9Feh Project Feh 1.4.1Feh Project Feh 1.4Feh Project Feh 1.3.5Feh Project FehFeh Project Feh 0.6.4Feh Project Feh 0.5.0Feh Project Feh 1.6.1Feh Project Feh 1.5Feh Project Feh 1.4.2Feh Project Feh 1.3.3Feh Project Feh 1.3.0Feh Project Feh 1.1.0
NA
CVE-2011-1031
The feh_unique_filename function in utils.c in feh 1.11.2 and previous versions might allow local users to create arbitrary files via a symlink attack on a /tmp/feh_ temporary file, a different vulnerability than CVE-2011-0702.
Feh Project Feh 1.4.3Feh Project Feh 1.4.2Feh Project Feh 1.4.1Feh Project Feh 1.4Feh Project Feh 1.6Feh Project Feh 1.11Feh Project Feh 1.10.1Feh Project Feh 1.10Feh Project Feh 1.5Feh Project Feh 1.8Feh Project Feh 1.3.5Feh Project Feh 1.11.1Feh Project Feh 1.7Feh Project Feh 1.6.1Feh Project Feh 1.9Feh Project Feh
NA
CVE-2011-0702
The feh_unique_filename function in utils.c in feh prior to 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack on a /tmp/feh_ temporary file.
Feh Project Feh 1.4.2Feh Project Feh 1.4.1Feh Project Feh 1.4Feh Project Feh 1.3.5Feh Project Feh 1.10Feh Project Feh 1.9Feh Project Feh 1.8Feh Project Feh 1.7Feh Project Feh 1.11Feh Project Feh 1.6Feh Project Feh 1.4.3Feh Project FehFeh Project Feh 1.10.1Feh Project Feh 1.6.1Feh Project Feh 1.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946CVE-2024-30309CVE-2024-4761CVE-2024-30051type confusionmemory leakCVE-2024-30293reflected XSSCVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook