{"id":"CVE-2022-45062","details":"In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.","modified":"2026-08-12T12:59:05.362792Z","published":"2022-11-09T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45062.json"},"references":[{"type":"WEB","url":"https://gitlab.xfce.org/xfce/xfce4-settings/-/tags"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45062.json"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGTGTTPFHDUB3EZHVKDK4H32QUUYPPFF/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45062"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202305-05"},{"type":"ADVISORY","url":"https://www.debian.org/security/2022/dsa-5296"},{"type":"REPORT","url":"https://gitlab.xfce.org/xfce/xfce4-settings/-/issues/390"},{"type":"FIX","url":"https://gitlab.xfce.org/xfce/xfce4-settings/-/commit/55e3c5fb667e96ad1412cf249879262b369d28d7"},{"type":"FIX","url":"https://gitlab.xfce.org/xfce/xfce4-settings/-/commit/f34a92a84f96268ad24a7a13fd5edc9f1d526110"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.xfce.org/xfce/xfce4-settings","events":[{"introduced":"0"},{"fixed":"b9729c85de00a340d6b6e432fbcd293cf7dedfe1"},{"introduced":"990fefc0658f83bfe44320b2e4542f7f529ead56"},{"fixed":"55e3c5fb667e96ad1412cf249879262b369d28d7"},{"fixed":"f34a92a84f96268ad24a7a13fd5edc9f1d526110"}],"database_specific":{"cpe":["cpe:2.3:a:xfce:xfce4-settings:*:*:*:*:*:*:*:*","cpe:2.3:a:xfce:xfce4-settings:4.17.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"fixed":"4.16.4"},{"introduced":"4.17.0"},{"last_affected":"4.17.0"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"]}}],"versions":["4.17.0","xfce4-settings-4.17.0","xfce-4.18pre1","xfce4-settings-4.16.3","xfce4-settings-4.16.2","xfce4-settings-4.16.1","xfce4-settings-4.16.0","xfce4-settings-4.15.3","xfce-4.16pre2","xfce4-settings-4.15.2","xfce-4.16pre1","xfce4-settings-4.15.1","xfce4-settings-4.15.0","xfce4-settings-4.14.0","xfce-4.14.0","xfce4-settings-4.13.8","xfce-4.14pre3","xfce4-settings-4.13.7","xfce-4.14pre2","xfce4-settings-4.13.6","xfce-4.14pre1","xfce4-settings-4.13.5","xfce4-settings-4.13.4","xfce4-settings-4.13.3","xfce4-settings-4.13.2","xfce4-settings-4.12.1","xfce4-settings-4.13.1","xfce4-settings-4.13.0","xfce4-settings-4.12.0","xfce4-settings-4.11.4","xfce4-settings-4.11.3","xfce4-settings-4.11.2","xfce4-settings-4.11.1","xfce4-settings-4.11.0","xfce4-settings-4.10.0","xfce4-settings-4.9.5","xfce4-settings-4.9.4","xfce4-settings-4.9.3","xfce4-settings-4.9.2","xfce4-settings-4.9.1","xfce4-settings-4.9.0","xfce4-settings-4.7.7","xfce4-settings-4.7.6","xfce4-settings-4.7.5","xfce4-settings-4.7.4","xfce4-settings-4.7.3","xfce4-settings-4.7.2","xfce4-settings-4.7.1","xfce4-settings-4.7.0","xfce-4.6.1","xfce-4.6.0","xfce-4.6rc1","xfce-4.6beta3","xfce-4.6beta2","xfce-4.6beta1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-45062.json","vanir_signatures_modified":"2026-08-12T12:59:05Z","vanir_signatures":[{"digest":{"function_hash":"207732176433895029146510160790945282773","length":2149},"id":"CVE-2022-45062-165771a6","signature_type":"Function","signature_version":"v1","source":"https://gitlab.xfce.org/xfce/xfce4-settings@f34a92a84f96268ad24a7a13fd5edc9f1d526110","target":{"file":"dialogs/mime-settings/xfce-mime-helper.c","function":"xfce_mime_helper_execute"},"deprecated":false},{"digest":{"line_hashes":["235040977140979489896805589899100752726","180966828469252487999039331855034094257","156598580866193210248001878238332097308","307686214548184304282125305656355118815","274653815977805649613367467682060753653","329481843613073388997310508693953060049","167537013811545757269774549020939753553","5475025598856937303560375889333616715","30229918120553002135958299684186117203","10701743742654492515837434791043032126","139957615580721779551020858830888565807","215902333590732068005797758694535417122","22666850322818297003016410265943557874","324626942087138765632567284739188145462","274989305501709938145145830750579055314","95201763561267944058307561222387842834","104957063489855835856249127908081599506","82090617724193277328401973641516208819","284810863447894747318255402572192013951","38078211358660096413061130494878433028","69536800756468836246523993125136879962","186147042880243608440449468534286346591"],"threshold":0.9},"id":"CVE-2022-45062-24c5320f","signature_type":"Line","signature_version":"v1","source":"https://gitlab.xfce.org/xfce/xfce4-settings@55e3c5fb667e96ad1412cf249879262b369d28d7","target":{"file":"dialogs/mime-settings/xfce-mime-helper.c"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["235040977140979489896805589899100752726","180966828469252487999039331855034094257","156598580866193210248001878238332097308","307686214548184304282125305656355118815","274653815977805649613367467682060753653","329481843613073388997310508693953060049","124850171391849527201187317710533451533","228418002766111840064230759043312671094","317308018246402755261442489203838675203","309149892713180504457746108443832261338","119586326576101726318490795993761749958","73265513159989036835895527405652145483","22666850322818297003016410265943557874","324626942087138765632567284739188145462","274989305501709938145145830750579055314","95201763561267944058307561222387842834","104957063489855835856249127908081599506","82090617724193277328401973641516208819","284810863447894747318255402572192013951","38078211358660096413061130494878433028","69536800756468836246523993125136879962","186147042880243608440449468534286346591"],"threshold":0.9},"id":"CVE-2022-45062-e58f5896","signature_type":"Line","signature_version":"v1","source":"https://gitlab.xfce.org/xfce/xfce4-settings@f34a92a84f96268ad24a7a13fd5edc9f1d526110","target":{"file":"dialogs/mime-settings/xfce-mime-helper.c"}},{"deprecated":false,"digest":{"function_hash":"291787716742600326682086045783267918044","length":2017},"id":"CVE-2022-45062-eedbc9ca","signature_type":"Function","signature_version":"v1","source":"https://gitlab.xfce.org/xfce/xfce4-settings@55e3c5fb667e96ad1412cf249879262b369d28d7","target":{"file":"dialogs/mime-settings/xfce-mime-helper.c","function":"xfce_mime_helper_execute"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}