Lucene search

K
cveFlexeraCVE-2007-2951
HistoryJun 26, 2007 - 6:30 p.m.

CVE-2007-2951

2007-06-2618:30:00
flexera
web.nvd.nist.gov
29
cve
kvirc
remote execution
shell metacharacters
irc protocol

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.03

Percentile

91.1%

The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) irc:// or (2) irc6:// URI.

Affected configurations

Nvd
Node
kvircirc_clientMatch3.2.0
VendorProductVersionCPE
kvircirc_client3.2.0cpe:2.3:a:kvirc:irc_client:3.2.0:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.03

Percentile

91.1%