kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a ' (single quote) character in the directory name, a different vulnerability than CVE-2014-2527.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2014-08-26T14:00:00
Updated: 2024-08-06T10:14:26.607Z
Reserved: 2014-03-17T00:00:00
Link: CVE-2014-2528

No data.

Status : Modified
Published: 2014-08-26T14:55:05.547
Modified: 2024-11-21T02:06:28.913
Link: CVE-2014-2528

No data.