Debian Mime-Support vulnerabilities

2 CVEs affecting Debian Mime-Support, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-7209, published 2015-01-06.

More from Debian.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-7209, published 2015-01-06. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.
• CVE-2003-0214, published 2003-05-12. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.