CVE-2017-16926
CriticalSummary
Ohcount version 3.0.0 is prone to command injection via specially crafted filenames containing shell metacharacters. An attacker can exploit this vulnerability by providing a source tree for Ohcount processing, allowing arbitrary code execution as the user running Ohcount.
Risk Assessment
This vulnerability may lead to arbitrary code execution on the system, posing a serious security threat to the organization. An attacker could gain access to the system and data, potentially resulting in loss of confidentiality and integrity of information.
Recommendation
It is recommended to update Ohcount to the latest version that addresses this vulnerability. Additionally, access to Ohcount processing functions should be restricted to trusted sources.
Original NVD description (English source)
Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.