| Package: | comix |
| Date: | 2008-04-14 |
| Vulnerable version: | 3.6.4-1 |
| Unaffected version: | 3.6.4-2kalgan1 |
| Bug tracker entry: | http://bugs.frugalware.org/task/2923 |
| CVEs: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1568 |
| Description: | A vulnerability has been reported in Comix, which can be exploited by malicious people to compromise a user's sytem. The vulnerability is caused due to the improper verification of received filenames when executing the rar, unrar, or jpegtran programs. This can be exploited to execute arbitrary commands via a file containing shell metacharacters within the filename. |
