feh project records
4 published records for vendor feh project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
- CWE-20 Improper Input Validation1
- CWE-787 Out-of-bounds Write1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
40Plan | CVE-2017-7875No exploit | In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundfeh project · feh · CWE-787 | Critical9.8 | 2.2%Apr 14, 2017 |
22Monitor | CVE-2010-2246Proof of concept | feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacfeh project · feh · CWE-20 | Medium5.1 | 6.6%May 26, 2011 |
13Monitor | CVE-2011-0702No exploit | The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack ofeh project · feh · CWE-59 | Low3.3 | 0.3%Feb 14, 2011 |
13Monitor | CVE-2011-1031No exploit | The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attackfeh project · feh · CWE-59 | Low3.3 | 0.3%Feb 14, 2011 |
- CVE-2017-787540Plan
In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-bound
CriticalCVSS 9.8No exploitEPSS 2%feh project · fehApr 14, 2017
- CVE-2010-224622Monitor
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharac
MediumCVSS 5.1Proof of conceptEPSS 6%feh project · fehMay 26, 2011
- CVE-2011-070213Monitor
The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack o
LowCVSS 3.3No exploitEPSS 0%feh project · fehFeb 14, 2011
- CVE-2011-103113Monitor
The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack
LowCVSS 3.3No exploitEPSS 0%feh project · fehFeb 14, 2011