Skip to content
OpenAdvisories

Package · Ubuntu

fluxbox

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.8

    Fluxbox through 1.3.7 OS Command Injection via Style Background Values

    Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme() that allows attackers to execute commands via crafted style background values. Attackers can embed shell metacharacters in background pixmap paths, random direc…