CVE-2007-4400: Konversation

Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days.

CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.

Affected products

• Konversation Konversation: any version

Published 2007-08-18. Last modified 2026-06-16.