tocsin

Debian/konversation: unknown

CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 f

Action: Upgrade konversation to 1.0.1-4 or later.

Affected

introducedfixedlast affected
01.0.1-4-

Fixed versions

1.0.1-4

Sources

published · modified · JSON