Total vulnerabilities in the database
kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.
| Software | From | Fixed in |
|---|---|---|
| kdirstat_project / kdirstat | 2.7.0 | 2.7.0.x |
| opensuse / opensuse | 13.1 | 13.1.x |