CVE-2007-4396
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123.pl 0.01, (4) ogg123.pl 0.01, (5) xmms.pl 2.0, (6) xmms2.pl 1.1.3, and (7) xmmsinfo.pl 1.1.1.1 scripts for irssi before 0.8.11 allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
Múltiples vulnerabilidades de inyección de retorno de carro y salto de línea (CRLF) en las secuencias de comandos (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123.pl 0.01, (4) ogg123.pl 0.01, (5) xmms.pl 2.0, (6) xmms2.pl 1.1.3, y (7) xmmsinfo.pl 1.1.1.1 para irssi anterior a 0.8.11 permite a atacantes remotos con la complicidad del usuario ejecutar comandos de IRC de su elección mediante secuencias CRLF en el nombre de la canción de un fichero .mp3.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2007-08-18 CVE Reserved
- 2007-08-18 CVE Published
- 2024-08-07 CVE Updated
- 2024-10-13 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html | Mailing List | |
| http://osvdb.org/39568 | Vdb Entry | |
| http://secunia.com/advisories/26483 | Third Party Advisory | |
| http://securityreason.com/securityalert/3036 | Third Party Advisory | |
| http://wouter.coekaerts.be/site/security/nowplaying | X_refsource_confirm | |
| http://www.securityfocus.com/archive/1/476283/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/25281 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/35985 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|