Описание
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:xchat:xchat:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:xchat:xchat:1.3.9:*:*:*:*:*:*:*
cpe:2.3:a:xchat:xchat:1.3.10:*:*:*:*:*:*:*
cpe:2.3:a:xchat:xchat:1.3.11:*:*:*:*:*:*:*
cpe:2.3:a:xchat:xchat:1.3.12:*:*:*:*:*:*:*
cpe:2.3:a:xchat:xchat:1.3.13:*:*:*:*:*:*:*
cpe:2.3:a:xchat:xchat:1.4:*:*:*:*:*:*:*
cpe:2.3:a:xchat:xchat:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:xchat:xchat:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:xchat:xchat:1.5.6:*:*:*:*:*:*:*
cpe:2.3:a:xchat:xchat:1.5.xdev:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.12341
Средний
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
redhat
почти 25 лет назад
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.
github
около 3 лет назад
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.
EPSS
Процентиль: 94%
0.12341
Средний
7.5 High
CVSS2
Дефекты
NVD-CWE-Other