CVE-2016-10081

High

Published: 29/12/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Version 0.93.1 of Shutter contains a vulnerability that allows user-assisted remote attackers to execute arbitrary commands. The issue occurs during the 'Run a plugin' action when an image name is mishandled.

Risk Assessment

Attackers can exploit this vulnerability to execute malicious code on the victim's system, potentially leading to data loss or system takeover.

Recommendation

It is recommended to update Shutter to the latest version to mitigate this vulnerability and to monitor systems for potential attack attempts.

Other vulnerabilities in Shutter

CVE-2015-0854High
In Shutter through version 0.93.1, there is a vulnerability that allows user-assisted remote attackers to execute arbitrary commands via a crafted image name mishandled during a 'Show in Folder' action.

Original NVD description (English source)

/usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action.