CVE-2007-4397: CRLF Injection
Multiple CRLF injection vulnerabilities in (1) xmms-thing 1.0, (2) XMMS Remote Control Script 1.07, (3) Disrok 1.0, (4) a2x 0.0.1, (5) Another xmms-info script 1.0, (6) XChat-XMMS 0.8.1, and other unspecified scripts for XChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4397?
CVE-2007-4397 has a moderate severity rating due to its potential for remote command execution.
How do I fix CVE-2007-4397?
To remediate CVE-2007-4397, update the affected software to the latest version where the CRLF injection vulnerability has been addressed.
Which software is affected by CVE-2007-4397?
CVE-2007-4397 affects multiple software including xmms-thing, XMMS Remote Control Script, and several others.
What kind of attacks are possible with CVE-2007-4397?
CVE-2007-4397 allows user-assisted remote attackers to execute arbitrary IRC commands.
Can I mitigate CVE-2007-4397 without a software update?
While updating is the best solution, you may limit exposure by restricting access to affected applications.