CVE Request: xdg-utils: xdg-open: command injection vulnerability

[Salvatore Bonaccorso <carnil () debian org>]

Hi

Another command injection vulnerability was reported to the Debian
bugtracker. The constraints to exploit this are similar to the ones
for CVE-2014-9622.

Debian Bug: https://bugs.debian.org/777722
Upstream Bug: https://bugs.freedesktop.org/show_bug.cgi?id=89129

Jiri Horner created as well a patch for this issue, which is attached
to the original bug and attached also a PoC.

https://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5;filename=xdg-open.diff;att=1;bug=777722

Could you please assign a CVE for this issue?

Regards,
Salvatore