CVE-2007-4397
Medium
Description
Multiple CRLF injection vulnerabilities in (1) xmms-thing 1.0, (2) XMMS Remote Control Script 1.07, (3) Disrok 1.0, (4) a2x 0.0.1, (5) Another xmms-info script 1.0, (6) XChat-XMMS 0.8.1, and other unspecified scripts for XChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
SeverityMedium
CVSS6.8
Exploit probability—
Product
Irssi
PublishedAug 18, 2007
First seenAug 18, 2007
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| irssi irssi | v ≤ 0.8.10rc5 | — |
| kristof_korwisi ixmmsa | 0.3 | — |
| mikachu l33t_xmms_music_showing_script | 2.00 | — |
| ricardo_mesquita mpg123 | 0.01 | — |
| ricardo_mesquita ogg123 | 0.01 | — |
| simon xmms2 | 1.1.3 | — |
| tuomas_jormola xmmsinfo | 1.1.1.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.