CVE-2007-2951 The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) irc:// or (2) irc6://....
HighCVSS 9.3
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) irc:// or (2) irc6:// URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kvirc irc client | = 3.2.0 | No fix listed |
| debian/kvirc(Debian:12) | < 2:3.2.4-5 | 2:3.2.4-5 |
| debian/kvirc(Debian:13) | < 2:3.2.4-5 | 2:3.2.4-5 |
| debian/kvirc(Debian:14) | < 2:3.2.4-5 | 2:3.2.4-5 |
References
- 37604 vdb-entry
- 25740 patch third-party-advisory vendor-advisory
- 26813 third-party-advisory
- secunia.com patch vendor-advisory
- GLSA-200709-02 vendor-advisory
- SUSE-SR:2007:015 vendor-advisory
- 20070628 Secunia Research: KVIrc irc:// URI Handler Command ExecutionVulnerability mailing-list
- 24652 vdb-entry
- ADV-2007-2334 vdb-entry
- kvirc-parseircurl-command-execution(35087) vdb-entry
- svn.kvirc.de
- Debian Security Tracker CVE-2007-2951 vendor-advisory
- bugs.debian.org issue-tracking