VULNERABILITY INTELLIGENCE

CVE-2014-2527

CVSS score6.8 NONE
EPSS probability3.01%
CISA KEVNot currently listed
Published2014-08-26
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references