Security Advisory

CVE-2007-4398

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-08-18 21:00:00
Last updated 2024-08-07 14:53:55
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple CRLF injection vulnerabilities in the (1) now-playing.rb and (2) xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.