CVE-2008-4748

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

No description provided by source. !-- KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Summary: KVIrc is a free portable IRC client based on the excellent Qt GUI toolkit. KVirc is being written by Szymon Stefanek and the KVIrc Development Team with the contribution of many IRC addicted...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

Summary KVIrc is a free portable IRC client based on the excellent Qt GUI toolkit. KVirc is being written by Szymon Stefanek and the KVIrc Development Team with the contribution of many IRC addicted developers around the world. Description KVIrc is prone to a remote format-string vulnerability...

kvirc-format.txt

KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remote Format String Exploit PoC\n\n\t\tby LiquidWorm c 2008"; function poc window.location.href = "irc://A:%n -i"; var answ = confirm"Press OK to start exploitation\nPress Cancel to skip exploitation"; if an...

KVIrc 3.4.0 - Virgo Remote Format String (PoC)

KVIrc 3.4.0 - Virgo Remote Format String PoC KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remote Format String Exploit PoC\n\n\t\tby LiquidWorm c 2008"; function poc window.location.href = "irc://A:%n -i"; var answ = confirm"Press OK to start...

KVIrc 3.4.0 - Virgo Remote Format String (PoC)

KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remote Format String Exploit PoC\n\n\t\tby LiquidWorm c 2008"; function poc window.location.href = "irc://A:%n -i"; var answ = confirm"Press OK to start exploitation\nPress Cancel to skip exploitation"; if an...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

Exploit for unknown platform in category dos / poc ================================================== KVIrc 3.4.0 Virgo Remote Format String Exploit PoC ================================================== KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remo...

Gentoo Security Advisory GLSA 200709-02 (kvirc)

The remote host is missing updates announced in advisory GLSA 200709-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200709-02 (kvirc)

The remote host is missing updates announced in advisory GLSA 200709-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : kvirc (kvirc-3953)

A bug in the IRC-URI parser allowed attackers to execute arbitrary commands by tricking a user into opening a specially crafted URI in kvirc CVE-2007-2951. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

GLSA-200709-02 : KVIrc: Remote arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200709-02 KVIrc: Remote arbitrary code execution Stefan Cornelius from Secunia Research discovered that the 'parseIrcUrl' function in file src/kvirc/kernel/kviircurl.cpp does not properly sanitise parts of the URI when building th...

KVIrc: Remote arbitrary code execution

Background KVIrc is a free portable IRC client based on Qt. Description Stefan Cornelius from Secunia Research discovered that the "parseIrcUrl" function in file src/kvirc/kernel/kviircurl.cpp does not properly sanitise parts of the URI when building the command for KVIrc's internal script system...

KVIrc irc:// URI处理器远程命令注入漏洞

BUGTRAQ ID: 24652 CVECAN ID: CVE-2007-2951 KVIrc是一款免费的可移植IRC客户端。 KVIrc客户端在处理“irc://”协议串时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行命令。 KVIrc客户端的src/kvirc/kernel/kviircurl.cpp文件中的parseIrcUrl函数在为KVIrc的内部脚本系统构建命令时没有正确过滤部分URI，如果用户受骗打开了特制的irc://或类似的URI（如irc6://）的话，就会导致注入并执行KVIrc脚本系统命令。成功攻击要求KVIrc是irc://或类似URI的默认处理器。...

[Full-disclosure] Secunia Research: KVIrc irc:// URI Handler Command Execution Vulnerability

====================================================================== Secunia Research 26/06/2007 - KVIrc irc:// URI Handler Command Execution Vulnerability - ====================================================================== Table of Contents Affected...

KVIrc IRC client buffer overflow

Buffer overflow in irc:// URL handler...

CVE-2007-2951

The parseIrcUrl function in src/kvirc/kernel/kviircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an 1 irc:// or 2 irc6:// URI...

CVE-2007-2951

The parseIrcUrl function in src/kvirc/kernel/kviircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an 1 irc:// or 2 irc6:// URI...

Code injection

The parseIrcUrl function in src/kvirc/kernel/kviircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an 1 irc:// or 2 irc6:// URI...

CVE-2007-2951

The parseIrcUrl function in src/kvirc/kernel/kviircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an 1 irc:// or 2 irc6:// URI...

CVE-2007-2951

The parseIrcUrl function in src/kvirc/kernel/kviircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an 1 irc:// or 2 irc6:// URI...