VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 22, 2017· Updated Jun 17, 2026

CVE-2017-16926

CVE-2017-16926

Description

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.

Affected products

2
  • Ohcount Project/Ohcount2 versions
    cpe:2.3:a:ohcount_project:ohcount:3.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ohcount_project:ohcount:3.0.0:*:*:*:*:*:*:*
    • (no CPE)range: =3.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.