Description
Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.
References
- 3036 third-party-advisory
- 20070815 Re: Vulnerability in multiple "now playing" scripts for various IRC clients mailing-list
- 20070812 Vulnerability in multiple "now playing" scripts for various IRC clients mailing-list
- 20070812 Vulnerability in multiple "now playing" scripts for various IRC clients mailing-list
- http://wouter.coekaerts.be/site/security/nowplaying
- 26491 third-party-advisory