CVE-2009-0068

no score yetEPSS 2.2%

freedesktop xdg-utils: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.

Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME type but using a safe type that Firefox sends to xdg-open, which causes xdg-open to process the dangerous file type through automatic type detection, as demonstrated by overwriting the .desktop file.

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2009-01-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

freedesktop:xdg-utils

References

http://www.openwall.com/lists/oss-security/2009/01/06/1
http://www.securityfocus.com/bid/33137
https://bugs.freedesktop.org/show_bug.cgi?id=19377
http://www.openwall.com/lists/oss-security/2009/01/06/1
http://www.securityfocus.com/bid/33137

Check your stack JSON