Lucene search

MitreCVE-2007-4401

HistoryAug 18, 2007 - 9:17 p.m.

CVE-2007-4401

2007-08-1821:17:00

mitre

web.nvd.nist.gov

cve-2007-4401

crlf injection

mirc

integration plugin

remote code execution

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.019

Percentile

88.8%

JSON

Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.

Affected configurations

Nvd

Node

mircadvanced_integration_plugin

VendorProductVersionCPE
mircadvanced_integration_plugin*cpe:2.3:a:mirc:advanced_integration_plugin:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mirc	advanced_integration_plugin	*	cpe:2.3:a:mirc:advanced_integration_plugin::::::::

References

lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html

secunia.com/advisories/26491

securityreason.com/securityalert/3036

wouter.coekaerts.be/site/security/nowplaying

www.securityfocus.com/archive/1/476283/100/0/threaded

www.securityfocus.com/bid/25281

exchange.xforce.ibmcloud.com/vulnerabilities/35985

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.019

Percentile

88.8%

JSON

Related for CVE-2007-4401