Intel

CVE-2015-20107

mailcap shell command injection

highEPSS 7.1%

Description

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9

Source: BSI_CSAFBSIOSVCVELISTV5NVD

Metrics

Severity
high
Priority score
95.22
KEV status
—
Exploit maturity
no public PoC known
XIEM Effective CVSS
7.6
Source: nvd-v3
CVSS v3
7.6
CVSS v4
—
EPSS percentile
93.8 %
Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
EPSS score
7.1 %
Moderate — model estimates 1-10% exploitation likelihood.
Published
2022-04-13 00:00 UTC
CWE
—

Affected operating systems

  • other

    fedoraproject / fedora35

  • other

    fedoraproject / fedora36

  • other

    fedoraproject / fedora37

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

  • netapp

    active_iq_unified_manager

  • netapp

    ontap_select_deploy_administration_utility

  • netapp

    snapcenter

  • python

    python3.10.0 – 3.10.8

  • python

    python3.7.0 – 3.7.15

  • python

    python3.8.0 – 3.8.15

  • python

    python3.9.0 – 3.9.15

References & sources

IDCVE-2015-20107
mailcap shell command injection — CVE-2015-20107 | NEOSEC Intel