CVE-2014-2527

2014-08-26T10:55:05
ID CVE-2014-2527
Type cve
Reporter NVD
Modified 2014-08-27T11:17:22

Description

kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.