kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote malicious users to execute arbitrary commands via a ' (single quote) character in the directory name, a different vulnerability than CVE-2014-2527.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
kdirstat project kdirstat 2.7.3 |
||
opensuse opensuse 13.1 |
Vulmon