The notify function in pidgin-knotify.c in the pidgin-knotify plugin 0.2.1 and earlier for Pidgin allows remote attackers to execute arbitrary commands via shell metacharacters in a message.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-94,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| jianping_yu | pidgin-knotify | 0.1 |
| jianping_yu | pidgin-knotify | 0.1.2 |
| jianping_yu | pidgin-knotify | 0.2.0 |
| jianping_yu | pidgin-knotify | * |