Lucene search
MitreCVE-2008-7070HistoryAug 25, 2009 - 10:30 a.m.
CVE-2008-7070
2009-08-2510:30:00
CWE-94
mitre
web.nvd.nist.gov
23
cve
2008
7070
argument injection
vulnerability
kvirc 3.4.2
shiny
remote
execution
arbitrary commands
uri handler
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.041
Percentile
92.3%
Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " (quote) followed by command line switches in a (1) irc:///, (2) irc6:///, (3) ircs:///, or (4) and ircs6:/// URI. NOTE: this might be due to an incomplete fix for CVE-2007-2951.
Affected configurations
Node
kvirckvircMatch3.4.2
Related
prion
prion
Design/Logic Flaw
2009-08-25 10:30:00
Code injection
2007-06-26 18:30:00
nvd
nvd
CVE-2008-7070
2009-08-25 10:30:00
CVE-2007-2951
2007-06-26 18:30:00
debiancve
debiancve
CVE-2008-7070
2009-08-25 10:30:00
CVE-2007-2951
2007-06-26 18:30:00
cvelist
cvelist
CVE-2008-7070
2009-08-25 10:00:00
CVE-2007-2951
2007-06-26 18:00:00
ubuntucve
ubuntucve
CVE-2008-7070
2009-08-25 00:00:00
CVE-2007-2951
2007-06-26 00:00:00
exploitdb
exploitdb
KVIrc 3.4.2 Shiny - URI handler Remote Command Execution
2008-11-21 00:00:00
openvas
openvas
KVIrc URI Handler Argument Injection Vulnerability
2009-09-02 00:00:00
KVIrc URI Handler Argument Injection Vulnerability
2009-09-02 00:00:00
Gentoo Security Advisory GLSA 200709-02 (kvirc)
2008-09-24 00:00:00
securityvulns
securityvulns
KVIrc IRC client buffer overflow
2007-06-28 00:00:00
nessus
nessus
openSUSE 10 Security Update : kvirc (kvirc-3953)
2007-10-17 00:00:00
GLSA-200709-02 : KVIrc: Remote arbitrary code execution
2007-09-14 00:00:00
cve
cve
CVE-2007-2951
2007-06-26 18:30:00
gentoo
gentoo
KVIrc: Remote arbitrary code execution
2007-09-13 00:00:00
seebug
seebug
KVIrc irc:// URIε€ηε¨θΏη¨ε½δ»€ζ³¨ε
₯ζΌζ΄
2007-06-29 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
Low
EPSS
0.041
Percentile
92.3%
Related for CVE-2008-7070