CVE-2010-2246

Published: May 26, 2011Modified: Apr 29, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL.

Affected (23)

Products: Feh Project: Feh

Feh Project

1 product

Feh

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Feh Project Feh	Up to 1.7
Feh Project Feh	Version 0.5.0
Feh Project Feh	Version 0.6.4
Feh Project Feh	Version 0.7.0
Feh Project Feh	Version 0.9.9
Feh Project Feh	Version 1.1.0
Feh Project Feh	Version 1.2.0
Feh Project Feh	Version 1.2.1
Feh Project Feh	Version 1.2.3
Feh Project Feh	Version 1.2.5
Feh Project Feh	Version 1.2.6
Feh Project Feh	Version 1.2.7
Feh Project Feh	Version 1.3.0
Feh Project Feh	Version 1.3.1
Feh Project Feh	Version 1.3.3
Feh Project Feh	Version 1.3.5
Feh Project Feh	Version 1.4.1
Feh Project Feh	Version 1.4.2
Feh Project Feh	Version 1.4.3
Feh Project Feh	Version 1.4
Feh Project Feh	Version 1.5
Feh Project Feh	Version 1.6.1
Feh Project Feh	Version 1.6