Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pine URL检查漏洞
Vulnerability Description
Pine是一个免费的，开放源码的email客户端程序，由华盛顿大学维护。 Pine设计上存在漏洞，可能使远程攻击者在用户机器上执行任意命令。 Pine在处理带有环境变量的URL时存在问题，当发送给用户的邮件中的URL链接中包含有编码过的环境变量时，URL中的命令会以收邮件用户的权限被执行。这可能导致用户在收邮件时，执行攻击者指定的一个或多个命令。这个漏洞只有在邮件客户端配置了URL处理程序(URL handler)时才会起作用。
CVSS Information
N/A
Vulnerability Type
N/A