Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-2951
HistoryJun 26, 2007 - 12:00 a.m.

CVE-2007-2951

2007-06-2600:00:00
ubuntu.com
ubuntu.com
6

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.016 Low

EPSS

Percentile

87.6%

The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0
allows user-assisted remote attackers to execute arbitrary commands via
shell metacharacters in an (1) irc:// or (2) irc6:// URI.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchkvirc<Β 3.2.0-5ubuntu1.1UNKNOWN
ubuntu6.10noarchkvirc<Β 3.2.4-3ubuntu1.1UNKNOWN
ubuntu7.04noarchkvirc<Β 3.2.4-5ubuntu1.1UNKNOWN

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.016 Low

EPSS

Percentile

87.6%