CVE-2007-4397: Irssi

Medium severity, CVSS 6.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple CRLF injection vulnerabilities in (1) xmms-thing 1.0, (2) XMMS Remote Control Script 1.07, (3) Disrok 1.0, (4) a2x 0.0.1, (5) Another xmms-info script 1.0, (6) XChat-XMMS 0.8.1, and other unspecified scripts for XChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.

Affected products

• Irssi Irssi: up to and including 0.8.10rc5
• Kristof Korwisi Ixmmsa: version 0.3 only
• Mikachu l33t Xmms Music Showing Script: version 2.00 only
• Ricardo Mesquita MPG123: version 0.01 only
• Ricardo Mesquita OGG123: version 0.01 only
• Simon XMMS2: version 1.1.3 only
• Tuomas Jormola Xmmsinfo: version 1.1.1.1 only

Published 2007-08-18. Last modified 2026-06-16.