CVE-2014-2527
kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which...
kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.
Exploit likelihood
What each source reports
NVD Score used
kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.
- Record
CVE-2014-2527- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.
- Record
CVE-2014-2527- Updated
- 2026-11-02
EUVDEUVD-2014-2563 No score
kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.
- Record
EUVD-2014-2563- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c69h-fp8v-vx97 No score
kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which...
kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.
- Record
GHSA-c69h-fp8v-vx97- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2527 is a medium vulnerability (CVSS 6.8) in Kdirstat Project Kdirstat, published August 26, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.01%, the 87th percentile. No source names a fixed version.
References
bitbucket.org/jeromerobert/k4dirstat/commits/1ad2e96d73fa06cd9be0f3749b337c03575016aa
lists.opensuse.org/opensuse-updates/2014-08/msg00015.html
bugzilla.redhat.com/show_bug.cgi?id=1077059
openwall.com/lists/oss-security/2014/03/17/2
bugs.debian.org/cgi-bin/bugreport.cgi?bug=741659
nvd.nist.gov/vuln/detail/CVE-2014-2527
github.com/advisories/GHSA-c69h-fp8v-vx97