CVE-2007-4401
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly...
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
Exploit likelihood
What each source reports
NVD Score used
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
- Record
CVE-2007-4401- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
- Record
CVE-2007-4401- Updated
- 2026-11-02
EUVDEUVD-2007-4384 No score
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
- Record
EUVD-2007-4384- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7v4r-7vpf-mxwf No score
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly...
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
- Record
GHSA-7v4r-7vpf-mxwf- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4401 is a medium vulnerability (CVSS 6.8) in Mirc Advanced Integration Plugin, published August 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.38%, the 83rd percentile. No source names a fixed version.
References
securityfocus.com/bid/25281
securityreason.com/securityalert/3036
lists.grok.org.uk/pipermail/full-disclosure/2007-August/065227.html
exchange.xforce.ibmcloud.com/vulnerabilities/35985
wouter.coekaerts.be/site/security/nowplaying
secunia.com/advisories/26491
nvd.nist.gov/vuln/detail/CVE-2007-4401
github.com/advisories/GHSA-7v4r-7vpf-mxwf