Lucene search
HistoryJun 24, 2008 - 7:41 p.m.
CVE-2008-2841
cve-2008-2841
xchat
windows
internet explorer
remote attackers
arbitrary commands
ircs uri
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.185 Low
EPSS
Percentile
96.3%
Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.
Affected configurations
Node
microsoftwindows_nt
microsoftinternet_explorer
ORxchatxchatRange≤2.8.7b
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:internet_explorer | microsoft internet explorer | eq | * |
| xchat:xchat | xchat | le | 2.8.7b |
Related
prion
prion
Design/Logic Flaw
2008-06-24 19:41:00
cvelist
cvelist
CVE-2008-2841
2008-06-24 19:00:00
debiancve
debiancve
CVE-2008-2841
2008-06-24 19:41:00
ubuntucve
ubuntucve
CVE-2008-2841
2008-06-24 00:00:00
nvd
nvd
CVE-2008-2841
2008-06-24 19:41:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.185 Low
EPSS
Percentile
96.3%
Related for CVE-2008-2841