PoC Index

CVE-2014-2528

MEDIUM 6.8EPSS 2.9%

kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a ' (single quote) character in the directory name, a different vulnerability than CVE-2014-2527.

CVSS v2.0
6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
2.88% chance of exploitation in the next 30 days, 86th percentile
Published
2014-08-26
Updated
2024-08-06

Proof-of-concept exploits (1)

References

Related