CVE-2015-0854

High

Published: 29/12/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Shutter through version 0.93.1, there is a vulnerability that allows user-assisted remote attackers to execute arbitrary commands via a crafted image name mishandled during a 'Show in Folder' action.

Risk Assessment

This vulnerability could lead to unauthorized code execution on the victim's system, posing a serious threat to data and system security.

Recommendation

It is recommended to update Shutter to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Other vulnerabilities in Shutter

CVE-2016-10081High
Version 0.93.1 of Shutter contains a vulnerability that allows user-assisted remote attackers to execute arbitrary commands. The issue occurs during the 'Run a plugin' action when an image name is mishandled.

Original NVD description (English source)

App/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Show in Folder" action.