Total vulnerabilities in the database
Multiple CRLF injection vulnerabilities in (1) xmms-thing 1.0, (2) XMMS Remote Control Script 1.07, (3) Disrok 1.0, (4) a2x 0.0.1, (5) Another xmms-info script 1.0, (6) XChat-XMMS 0.8.1, and other unspecified scripts for XChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
| Software | From | Fixed in |
|---|---|---|
| tuomas_jormola / xmmsinfo | 1.1.1.1 | 1.1.1.1.x |
| ricardo_mesquita / ogg123 | 0.01 | 0.01.x |
| mikachu / l33t_xmms_music_showing_script | 2.00 | 2.00.x |
| simon / xmms2 | 1.1.3 | 1.1.3.x |
| kristof_korwisi / ixmmsa | 0.3 | 0.3.x |
| irssi / irssi | - | 0.8.10rc5.x |
| ricardo_mesquita / mpg123 | 0.01 | 0.01.x |