CVE-2014-9622

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.26%

Published

Jan 21, 2015

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open.

Weaknesses (CWE)

CWE-77

Affected Products (1)

gentoo · xdg-utilsvulnerable

References (16)

http://seclists.org/fulldisclosure/2014/Nov/36

Exploit

http://secunia.com/advisories/62155

http://www.debian.org/security/2015/dsa-3131

http://www.openwall.com/lists/oss-security/2015/01/17/10

http://www.securityfocus.com/bid/71284

https://bugs.freedesktop.org/show_bug.cgi?id=66670

Exploit

https://bugs.gentoo.org/show_bug.cgi?id=472888

Exploit

https://security.gentoo.org/glsa/201701-09

http://seclists.org/fulldisclosure/2014/Nov/36

Exploit

http://secunia.com/advisories/62155

http://www.debian.org/security/2015/dsa-3131

http://www.openwall.com/lists/oss-security/2015/01/17/10

http://www.securityfocus.com/bid/71284

https://bugs.freedesktop.org/show_bug.cgi?id=66670

Exploit

https://bugs.gentoo.org/show_bug.cgi?id=472888

Exploit

https://security.gentoo.org/glsa/201701-09

KEV Catalog EPSS Scores Vendors All CVEs