CVE-2014-2527

kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a "…

published August 26, 2014

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03008 · 87.3th percentile
Published
2014-08-26T14:00Z
EPSS history
Timeline
  • 26 AUG 14:00Z
    kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a "…
    cvelistv5