CVE-2008-2841 Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs://...
MediumCVSS 6.8
EPSS 15.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | All versions | No fix listed |
| xchat | <= 2.8.7b | No fix listed |
References
- forum.xchat.org
- 30695 third-party-advisory vendor-advisory
- 29696 vdb-entry
- xchat-ircs-command-execution(43065) vdb-entry
- 5795 exploit