CVE-2014-8873 in Debian openjdk-7
Summary
A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file.
Reservation
11/14/2014
Disclosure
11/09/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 79095 | Debian openjdk-7 .desktop input validation | 20 | Not defined | Official fix | CVE-2014-8873 |