Vulnerability in Fvwm

CVE-2003-1308

CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns in a filename.

EPSS: 0.013 (68.0th percentile) — read the EPSS interpretation.

Affected products

  • Fvwm
  • N/a — versions n/a

References