01 Record

CVE-2007-4397

Multiple CRLF injection vulnerabilities in (1) xmms-thing 1.0, (2) XMMS Remote Control Script 1.07, (3) Disrok 1.0, (4) a2x 0.0.1, (5) Another xmms-info script 1.0, (6) XChat-XMMS 0.8.1, and other

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Multiple CRLF injection vulnerabilities in (1) xmms-thing 1.0, (2) XMMS Remote Control Script 1.07, (3) Disrok 1.0, (4) a2x 0.0.1, (5) Another xmms-info script 1.0, (6) XChat-XMMS 0.8.1, and other

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 2.14% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 81.9% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2007-08-18 21:00Z19 YR AGO
Last updated: 2024-08-07 14:53Z2 YR AGO
Reserved: 2007-08-18
Assigning CNA: mitre
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.1
Document digest: d9ae5ef209dfb307ccd49e417410f8b5d632a2a102f26199bc1757ecbb98d36c

05 Affected products

VendorProductVersionsPlatforms

irssiirssiNot specified—

kristof_korwisiixmmsaNot specified—

mikachul33t_xmms_music_showing_scriptNot specified—

ricardo_mesquitampg123Not specified—

ricardo_mesquitaogg123Not specified—

simonxmms2Not specified—

tuomas_jormolaxmmsinfoNot specified—

06 References

secunia.com26485http://secunia.com/advisories/26485third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com25281http://www.securityfocus.com/bid/25281vdb-entryx_refsource_BID
securityreason.com3036http://securityreason.com/securityalert/3036third-party-advisoryx_refsource_SREASON
secunia.com26488http://secunia.com/advisories/26488third-party-advisoryx_refsource_SECUNIA
secunia.com26484http://secunia.com/advisories/26484third-party-advisoryx_refsource_SECUNIA
secunia.com26486http://secunia.com/advisories/26486third-party-advisoryx_refsource_SECUNIA
lists.grok.org.uk20070812 Vulnerability in multiple "now playing" scripts for various IRC clientshttp://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.htmlmailing-listx_refsource_FULLDISC
osvdb.org39575http://osvdb.org/39575vdb-entryx_refsource_OSVDB
secunia.com26487http://secunia.com/advisories/26487third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com20070812 Vulnerability in multiple "now playing" scripts for various IRC clientshttp://www.securityfocus.com/archive/1/476283/100/0/threadedmailing-listx_refsource_BUGTRAQ
exchange.xforce.ibmcloud.comirc-multiple-command-execution(35985)https://exchange.xforce.ibmcloud.com/vulnerabilities/35985vdb-entryx_refsource_XF
secunia.com26454http://secunia.com/advisories/26454third-party-advisoryx_refsource_SECUNIA
wouter.coekaerts.behttp://wouter.coekaerts.be/site/security/nowplayingx_refsource_MISC
secunia.com26455http://secunia.com/advisories/26455third-party-advisoryx_refsource_SECUNIA
osvdb.org39574http://osvdb.org/39574vdb-entryx_refsource_OSVDB