Unrated severityNVD Advisory· Published Feb 25, 2010· Updated Jun 16, 2026

CVE-2010-0011

Description

The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Uzbl/Uzbl2 versions
cpe:2.3:a:uzbl:uzbl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:uzbl:uzbl:*:*:*:*:*:*:*:*range: <=2009.12.22
- (no CPE)range: <2010.01.05

Patches

Vulnerability mechanics

References

github.com/Dieterbe/uzbl/commit/1958b52d41cba96956dc1995660de49525ed1047nvd
lists.uzbl.org/pipermail/uzbl-dev-uzbl.org/2010-January/000586.htmlnvd
www.openwall.com/lists/oss-security/2010/01/06/1nvd
www.openwall.com/lists/oss-security/2010/01/06/3nvd
www.uzbl.org/news.phpnvd
exchange.xforce.ibmcloud.com/vulnerabilities/56612nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000