KVIrc URI Handler Argument Injection Vulnerability

KVIrc is prone to an argument injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

Design/Logic Flaw

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

The CVE-2008-7070 entry describes an Argument injection vulnerability in the KVIrc 3.4.2 Shiny URI handler that allows remote attackers to execute arbitrary commands by supplying a quote followed by command line switches in URI schemes such as irc:///, irc6:///, ircs:///, or ircs6:///. This align...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

KVIrc 3.4.2 Shiny (uri handler) remote command execution exploit

!-- KVIrc 3.4.2 Shiny uri handler remote command execution exploit by Nine:Situations:Group::strawdog Tested against IE8beta/WINxpsp3 software site: http://www.kvirc.net/?lang=en description: "KVIrc is a Multilanguage, graphical IRC-Client for Windows, Linux, Unix and Mac OS..." A command line...

KVIrc shell characters vulnerabilities

Shell characters vulnerability on irc:/// URI parsing...

KVIrc 3.4.2 Shiny (uri handler) Remote Command Execution Exploit

No description provided by source. !-- KVIrc 3.4.2 Shiny uri handler remote command execution exploit by Nine:Situations:Group::strawdog Tested against IE8beta/WINxpsp3 software site: http://www.kvirc.net/?lang=en description: "KVIrc is a Multilanguage, graphical IRC-Client for Windows, Linux, Un...

KVIrc 3.4.2 Shiny (uri handler) Remote Command Execution Exploit

Exploit for unknown platform in category remote exploits ================================================================ KVIrc 3.4.2 Shiny uri handler Remote Command Execution Exploit ================================================================ Heaven and Earth are impartial They see the ten...

kvirc-exec.txt

Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial...

KVIrc 3.4.2 Shiny - URI handler Remote Command Execution

KVIrc 3.4.2 Shiny - URI handler Remote Command Execution Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial/a...

KVIrc 3.4.2 Shiny - URI handler Remote Command Execution

Heaven and Earth are impartial They see the ten thousand things as straw dogs The wise are impartial a href='ircs6:///"%20--nosplash%20-e%20"run%20c...

KVIrc URI处理器远程格式串处理漏洞

BUGTRAQ ID: 31912 KVIrc是基于Qt GUI工具包的免费可移植IRC客户端。 KVIrc在处理URI时存在格式串漏洞，如果将KVIrc设置为默认的IRC URI处理器的话，则用户受骗跟随了特制的irc:// URI就会导致执行任意指令。 KVIrc 3.4.0 KVIrc ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.kvirc.net/ html titleKVIrc v3.4.0 Virgo Remote Format String Exploit PoC/Title head...

CVE-2008-4748

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...

CVE-2008-4748

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...

Format string

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...

CVE-2008-4748

KVirc 3.4.0 is affected by a format-string vulnerability in the URI handler when KVirc is set as the default application for processing irc:// URIs. The flaw allows a remote attacker to cause a denial of service (application crash) and potentially execute arbitrary code via format specifiers in t...

CVE-2008-4748

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...