Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

konversation: arbitrary code execution

Package(s):

konversation

CVE #(s):

CVE-2007-4400

Created:

April 9, 2008

Updated:

April 9, 2008

Description:

From the Red Hat bugzilla:

Media script (/usr/share/apps/konversation/scripts/media) that is distributed with konversation package reportedly does not escape tags from media files corr[e]ctly allowing command injection into IRC channel.

Alerts:

Fedora	FEDORA-2008-2062	2008-04-08
Fedora	FEDORA-2008-2122	2008-04-08

(Log in to post comments)