CVE-2014-2528

kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a '…

published August 26, 2014

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a ' (single quote) character in the directory name, a different vulnerability than CVE-2014-2527.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02879 · 86.7th percentile
Published
2014-08-26T14:00Z
EPSS history
Timeline
  • 26 AUG 14:00Z
    kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a '…
    cvelistv5