Back to CVE Browser

CVE-2017-9149

HIGH

7.5

CVSS Severity Score

EPSS Score0.1690%

EPSS Percentile15.75th

PublishedMay 22, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

Metadata Anonymisation Toolkit (MAT) 0.6 and 0.6.1 silently fails to perform "Clean metadata" actions upon invocation from the Nautilus contextual menu, which allows context-dependent attackers to obtain sensitive information by reading a file for which cleaning had been attempted.

Affected Platforms (CPE)

📦

Metadata Anonymisation Toolkit Project

Metadata Anonymisation Toolkit

= 0.6

📦

Metadata Anonymisation Toolkit Project

Metadata Anonymisation Toolkit

= 0.6.1

References & Advisories

🔗 https://0xacab.org/mat/mat/commit/8f6303a1f26fe8dad83ba96ab8328dbdfa3af59a

🔗 https://0xacab.org/mat/mat/commit/94ca62a429bb6a3a5f293de26053e54bbfeea9f9

🔗 https://0xacab.org/mat/mat/issues/11527

🔗 https://bugs.debian.org/858058

🔗 https://0xacab.org/mat/mat/commit/8f6303a1f26fe8dad83ba96ab8328dbdfa3af59a

🔗 https://0xacab.org/mat/mat/commit/94ca62a429bb6a3a5f293de26053e54bbfeea9f9

🔗 https://0xacab.org/mat/mat/issues/11527

🔗 https://bugs.debian.org/858058

Related Vulnerabilities

CVE-2017-278510.0

An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially cra...

CVE-2017-278810.0

A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet ...

CVE-2017-514510.0

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. S...

CVE-2017-772210.0

In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with ...