--- title: "CVE-2007-4396\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2007-4396?format=md keywords: index, follow --- # CVE-2007-4396 Publication date 18 August 2007 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123.pl 0.01, (4) ogg123.pl 0.01, (5) xmms.pl 2.0, (6) xmms2.pl 1.1.3, and (7) xmmsinfo.pl 1.1.1.1 scripts for irssi before 0.8.11 allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | irssi-scripts | 9.10 karmic | Fixed 20070925 | | 9.04 jaunty | Fixed 20070925 | | 8.10 intrepid | Fixed 20070925 | | 8.04 LTS hardy | Fixed 20070925 | | 7.10 gutsy | Fixed 20070925 | | 7.04 feisty | Ignored end of life, was needed | | 6.10 edgy | Ignored end of life, was needed | | 6.06 LTS dapper | Ignored end of life | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4396) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2007-4396) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2007-4396) * [Debian](https://security-tracker.debian.org/tracker/CVE-2007-4396) ### Other references *