Description
The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code.
References
- [uzbl-dev] 20100102 Fw: Uzbl: security issue mailing-list
- http://github.com/Dieterbe/uzbl/commit/1958b52d41cba96956dc1995660de49525ed1047
- http://github.com/Dieterbe/uzbl/downloads
- http://www.uzbl.org/news.php?id=22
- uzbl-evaljs-command-execution(56612) vdb-entry
- [oss-security] 20100106 CVE request - uzbl remote code execution mailing-list
- [oss-security] 20100106 Re: CVE request - uzbl remote code execution mailing-list