CVE:CVE-2007-4397
CNNVD:CNNVD-200708-303
Xchat的(1) xmms-thing 1.0, (2) XMMS Remote Control Script 1.07, (3) Disrok 1.0, (4) a2x 0.0.1, (5) Another xmms-info script 1.0, (6) XChat-XMMS 0.8.1, 和其他未明脚本中存在多个CRLF注入漏洞。用户协助式的远程攻击者可以借助一个.mp3文件的歌曲中的CRLF序列，执行任意IRC指令。
solution:Upgrade irssi irssi to a higher version than 0.8.10rc5,and avoid the version (,0.8.10rc5]; Upgrade kristof_korwisi ixmmsa to a higher version than 0.3,and avoid the version 0.3; Upgrade mikachu l33t_xmms_music_showing_script to a higher version than 2.00,and avoid the version 2.00; Upgrade ricardo_mesquita mpg123 to a higher version than 0.01,and avoid the version 0.01; Upgrade ricardo_mesquita ogg123 to a higher version than 0.01,and avoid the version 0.01; Upgrade simon xmms2 to a higher version than 1.1.3,and avoid the version 1.1.3; Upgrade tuomas_jormola xmmsinfo to a higher version than 1.1.1.1,and avoid the version 1.1.1.1