CVE-2008-2841: Code Injection
Published Jun 24, 2008
·Updated
Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.
Affected Software
3 affected components
Microsoft Windows NT
Microsoft Internet Explorer
Xchat xchat<=2.8.7b
Event History
Jun 24, 2008
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
07:41 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-2841?
CVE-2008-2841 is considered to have a high severity due to the potential for remote command execution.
2
How do I fix CVE-2008-2841?
To fix CVE-2008-2841, update XChat to a version later than 2.8.7b.
3
Who is affected by CVE-2008-2841?
Users of XChat versions 2.8.7b and earlier on Windows, particularly those using Internet Explorer, are affected by CVE-2008-2841.
4
What type of vulnerability is CVE-2008-2841?
CVE-2008-2841 is an argument injection vulnerability.
5
Can CVE-2008-2841 be exploited remotely?
Yes, CVE-2008-2841 can be exploited remotely via specially crafted ircs:// URIs.