CVE-2014-7209

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.

EPSS

2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-25)

CWE

CWE-77

Published

2015-01-06

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• debian:mime-support

References

• http://secunia.com/advisories/61892
• http://secunia.com/advisories/62079
• http://www.debian.org/security/2014/dsa-3114
• http://www.openwall.com/lists/oss-security/2014/12/31/8
• http://www.securityfocus.com/bid/71797

Check your stackJSON