CVE-2012-5534
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote...
CVE-2012-5534 is a high vulnerability (CVSS 7.5) in Flashtux Weechat, published December 3, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.44%, the 91st percentile. Fixed in weechat 0.3.9.2-1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 4.44%EPSS, 91st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.3.9.2-1weechat +3 more
Description
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."
- Record
CVE-2012-5534- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."
- Record
CVE-2012-5534- Updated
- 2026-11-02
EUVDEUVD-2012-5426No score
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."
- Record
EUVD-2012-5426- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q88q-j4pq-r9xgNo score
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote...
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."
- Record
GHSA-q88q-j4pq-r9xg- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."
- Record
CVE-2012-5534- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-5534No score
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."
- Record
DEBIAN-CVE-2012-5534- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
git.savannah.gnu.org/gitweb?p=weechat.git%3Ba=commitdiff_plain%3Bh=efb795c74fe954b9544074aafcebb1be4452b03a
secunia.com/advisories/51294
lists.opensuse.org/opensuse-security-announce/2013-01/msg00018.html
wiki.mageia.org/en/Support/Advisories/MGASA-2012-0347
Show 12 moreShow less
securityfocus.com/bid/56584
lists.fedoraproject.org/pipermail/package-announce/2012-November/093516.html
weechat.org/security
openwall.com/lists/oss-security/2012/11/19/4
savannah.nongnu.org/bugs?37764
mandriva.com/security/advisories?name=MDVSA-2013:136
nvd.nist.gov/vuln/detail/CVE-2012-5534
github.com/advisories/GHSA-q88q-j4pq-r9xg
security-tracker.debian.org/tracker/CVE-2012-5534