Interaction Error in xdg-open Affects Firefox and Freedesktop
CVE-2009-0068
Currently unrated
What is CVE-2009-0068?
The xdg-open utility encounters a critical interaction error when processing files with MIME types. Attackers can exploit this flaw by sending specially crafted files that are labeled with safe MIME types. This manipulation tricks xdg-open into executing potentially harmful files based on incorrect automatic type detection. As demonstrated, this could lead to the unwanted modification of files, such as overwriting .desktop files, granting attackers a foothold in the targeted systems.