Feh Project Feh
4 CVEs affecting Feh Project Feh. Latest disclosed: 2017-04-14. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7875 | Critical | 9.8 | 2017-04-14 | In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write whil… |
CVE-2010-2246 | | 2011-05-26 | feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL. | |
CVE-2011-1031 | | 2011-02-14 | The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh_ tem… | |
CVE-2011-0702 | | 2011-02-14 | The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack on a /tmp/feh_ tempo… |