Improper Handling of Exceptional Conditions

CVE-2009-5043

High

7.5/10

Summary

burn allows file names to escape via mishandled quotation marks

Access Complexity: LOW
AccessVector: NETWORK
Authentication: NONE
Integrity Impact: PARTIAL
Confidentiality Impact: PARTIAL
Availability Impact: PARTIAL

CWE-755 - Improper Handling of Exceptional Conditions

The software does not handle or incorrectly handles an exceptional condition.

References

Advisory Timeline

Published Oct 31, 2019