CVE-2015-1592
19.02.2015, 15:59
Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| debian | debian_linux | 7.0 |
| sixapart | movable_type | 5.2.0 ≤ 𝑥 < 5.2.12 |
| sixapart | movable_type | 5.2.0 ≤ 𝑥 < 5.2.12 |
| sixapart | movable_type | 5.2.0 ≤ 𝑥 < 5.2.12 |
| sixapart | movable_type | 6.0 ≤ 𝑥 < 6.0.7 |
| sixapart | movable_type | 6.0 ≤ 𝑥 < 6.0.7 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References