A .desktop file in the Debian openjdk-7 package 7u79-2.5... · CVE-2014-8873 · GitHub Advisory Database · GitHub

A .desktop file in the Debian openjdk-7 package 7u79-2.5...

High severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Jan 28, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file.

References

Published by the National Vulnerability Database

Nov 9, 2015

Published to the GitHub Advisory Database May 17, 2022

Last updated Jan 28, 2023