RCE in Gparted

CVE-2014-7208

GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in a crafted filesystem label.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.011 (62.7th percentile) — read the EPSS interpretation.

Affected products

Gparted
N/a — versions n/a

Weakness classification (CWE)

CWE-77 — Command Injection

References

security@debian.org (mailing-list, Exploit, x_refsource_FULLDISC, Mailing List, Third Party Advisory)
security@debian.org (x_refsource_CONFIRM, Third Party Advisory)