CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4398

CVE-2007-4398 affects WeeChat scripts now-playing.rb and xmms.pl 1.1. Multiple CRLF injection vulnerabilities allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name field of a .mp3 file. Root cause: CRLF injection in parsing/handling of the song name...