Lucene search
HistoryAug 25, 2009 - 10:30 a.m.
CVE-2008-7070
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.041
Percentile
92.3%
Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " (quote) followed by command line switches in a (1) irc:///, (2) irc6:///, (3) ircs:///, or (4) and ircs6:/// URI. NOTE: this might be due to an incomplete fix for CVE-2007-2951.
Affected configurations
Node
kvirckvircMatch3.4.2
Related
cvelist
cvelist
CVE-2008-7070
2009-08-25 10:00:00
CVE-2007-2951
2007-06-26 18:00:00
debiancve
debiancve
CVE-2008-7070
2009-08-25 10:30:00
CVE-2007-2951
2007-06-26 18:30:00
ubuntucve
ubuntucve
CVE-2008-7070
2009-08-25 00:00:00
CVE-2007-2951
2007-06-26 00:00:00
prion
prion
Design/Logic Flaw
2009-08-25 10:30:00
Code injection
2007-06-26 18:30:00
cve
cve
CVE-2008-7070
2009-08-25 10:30:00
CVE-2007-2951
2007-06-26 18:30:00
securityvulns
securityvulns
KVIrc IRC client buffer overflow
2007-06-28 00:00:00
nvd
nvd
CVE-2007-2951
2007-06-26 18:30:00
nessus
nessus
openSUSE 10 Security Update : kvirc (kvirc-3953)
2007-10-17 00:00:00
GLSA-200709-02 : KVIrc: Remote arbitrary code execution
2007-09-14 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200709-02 (kvirc)
2008-09-24 00:00:00
KVIrc URI Handler Argument Injection Vulnerability
2009-09-02 00:00:00
Gentoo Security Advisory GLSA 200709-02 (kvirc)
2008-09-24 00:00:00
gentoo
gentoo
KVIrc: Remote arbitrary code execution
2007-09-13 00:00:00
seebug
seebug
KVIrc irc:// URIε€ηε¨θΏη¨ε½δ»€ζ³¨ε
₯ζΌζ΄
2007-06-29 00:00:00
exploitdb
exploitdb
KVIrc 3.4.2 Shiny - URI handler Remote Command Execution
2008-11-21 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.041
Percentile
92.3%
Related for NVD:CVE-2008-7070