All vulnerabilities

Servers and applications

CVE-2014-8873

A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file.

Severity
High 10.0
Published
9 Nov 2015
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
JavaServers and applications · cpe:a:oracle:openjdk
  • Version 1.7.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2014-8873
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2014-8873