CVE-2008-2841 Information

Description

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows when Internet Explorer is used allows remote attackers to execute arbitrary commands via the –command parameter in an ircs:// URI.

Reference

http://forum.xchat.org/viewtopic.php?t=4218 http://secunia.com/advisories/30695 http://www.securityfocus.com/bid/29696 https://exchange.xforce.ibmcloud.com/vulnerabilities/43065 https://www.exploit-db.com/exploits/5795