CVE-2007-2951
- State
- Published
- Severity
- Not scored
- Published
- Jun 26, 2007
- Updated
- Aug 7, 2024
- Reserved
- May 31, 2007
Description
The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) irc:// or (2) irc6:// URI.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://svn.kvirc.de/kvirc/changeset/630/#file3
- 20070628 Secunia Research: KVIrc irc:// URI Handler Command ExecutionVulnerabilitymailing-list
- GLSA-200709-02vendor-advisory
- kvirc-parseircurl-command-execution(35087)vdb-entry
- 26813third-party-advisory
- ADV-2007-2334vdb-entry
- 37604vdb-entry
- 24652vdb-entry
- SUSE-SR:2007:015vendor-advisory
- http://secunia.com/secunia_research/2007-56/advisory/
- 25740third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.